General

  • Target

    file.rar

  • Size

    8.8MB

  • MD5

    3443deb58509fdef6b491faecb2af7c3

  • SHA1

    06a8d45a279f1b5bccb37f20f1d0551860aa1849

  • SHA256

    0e1dc7a84177af8d5ce9df7049e6fbd7ee7c4acf65e4e882383baa343700a85b

  • SHA512

    d5a43c37257c045b69c4316cced0a50b32386560851710c82549b3e5b342db090168d4563a5272814e5a1399486b74f4bc3fc2723ec553577cb34fdf3bd981fa

  • SSDEEP

    196608:ulofIzfDC8WqVrQT4tzXXg83wb0MCKFu46X9PckOeIXhGQN:u3TN3A83gKK84OHOeEN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • file.rar
    .rar

    Password: 1234

  • amdhip64.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    1c2f4d4b9ed7d6c726296dca5b10f60c


    Headers

    Imports

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: 1234

    6affc89bdfe3a47fde3269fc7912cb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.pyc
  • res_mods/1.23.0.0/scripts/client/gui/mods/mod_a.xml
  • res_mods/1.24.0.0/readme.txt
  • res_mods/1.25.0.0/readme.txt
  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    448b6888b26145ced7ce018aab459303


    Headers

    Imports

    Sections

  • updates/icudtl.dat