General

  • Target

    Rebound.Dir.zip

  • Size

    9.6MB

  • MD5

    d25a476c43733dfb4463a2763c922af2

  • SHA1

    d52fdcc81919992325e3c99bb2e8fd380ce9ce66

  • SHA256

    8d97f6a1bdcddac822bba6c32858d21cab5ecb972995a990595a2d7cee7bf236

  • SHA512

    83c9490f1a76fccf2b335e9cd1a52000b8d512a4123de1d4e7f1bdca5e61edba565858f5e18882a9d58dabae8c98cd6573399474c58cfb8f13c30a44e78dddc5

  • SSDEEP

    196608:of6gErFCSE+OM08CW7e/nO/Ci5pZ7OVw28FXQIWJAUUn2y/jD6EAV:o6gExCij0g7e/CCU48VQIWaUUPE

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Rebound.Dir.zip
    .zip
  • Rebound.Dir/ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Rebound.Dir/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Rebound.Dir/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Rebound.Dir/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Rebound.Dir/NG UI.deps.json
  • Rebound.Dir/NG UI.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Rebound.Dir/NG UI.pdb
  • Rebound.Dir/NG UI.runtimeconfig.json
  • Rebound.Dir/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Rebound.Dir/WebView2Loader.dll
    .dll windows:5 windows x64 arch:x64

    3fd78a8f50b85b627af2d0fc485b5e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebound.Dir/Wpf.Ui.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Rebound.Dir/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Rebound.Dir/bin/path.txt
  • Rebound.Dir/bin/version.txt
  • Rebound.Dir/cd57e4c171d6e8f5ea8b8f824a6a7316.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • Rebound.Dir/cd57e4c171d6e8f5ea8b8f824a6a7316.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Rebound.Dir/cpr.dll
    .dll windows:6 windows x64 arch:x64

    7bc8b32667f209b178f1f0635b6ee0d5


    Headers

    Imports

    Exports

    Sections

  • Rebound.Dir/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    9a4ddbe07217dde8376bb7c577388155


    Headers

    Imports

    Exports

    Sections

  • Rebound.Dir/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebound.Dir/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebound.Dir/ws2_32.dll
    .dll windows:10 windows x64 arch:x64

    6eee61ef7874aa59d1a3452c72e61d5c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebound.Dir/zlib1.dll
    .dll windows:4 windows x64 arch:x64

    9434905d51e7bf5f119cc9e5ee85d0da


    Headers

    Imports

    Exports

    Sections