General

  • Target

    #!SetUp_88056--!PassW0rdz#$$.zip

  • Size

    13.9MB

  • MD5

    2058c7f785ee2f7193f348171411adeb

  • SHA1

    51a69a96d6c60f8a60ce4076591cad7c27b189e6

  • SHA256

    e9138d54060c84839abb2cac54abc0298bfa8fc3d176b5edda13bd92e910788e

  • SHA512

    ca293eb125215d2ad18350624c881a2f3b1a63fc4cdce40c0ae1cdda3db3abb157aad8c97aef54985b845b5f00b8d53682862576e6948aa1dcaf58f84d169082

  • SSDEEP

    393216:bOQPK1f0RjbyRxl7FuQqUJ8rZVc0frzeJN6shJpwKg:qnf8+xXqUJQyz/6kJpwKg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • #!SetUp_88056--!PassW0rdz#$$.zip
    .zip

    Password: 88056

  • 0pen___files/!?etUp_88056--#PaS?K?y#$$.rar
    .rar

    Password: 88056

  • Language/Locals/am.pak
  • Language/Locals/ar.pak
  • Language/Locals/fi.pak
  • Language/Locals/fil.pak
  • Language/Locals/fonts/8514sys.fon
  • Language/Locals/fonts/dosapp.fon
  • Language/Locals/fonts/smalle.fon
  • Language/Locals/fonts/symbol.ttf
  • Language/Locals/fonts/trebucbd.ttf
  • Language/Locals/fonts/trebucbi.ttf
  • Language/Locals/fonts/verdana.ttf
  • Language/Locals/fonts/verdanab.ttf
  • Language/Locals/fr.pak
  • Language/Locals/gu.pak
  • Language/Locals/he.pak
  • Language/Locals/hi.pak
  • Language/Locals/hr.pak
  • Language/Locals/hu.pak
  • Language/Locals/id.pak
  • Language/Locals/lt.pak
  • Language/Locals/lv.pak
  • Language/Paring_[1MB]_[1].exe
    .exe windows:5 windows x86 arch:x86

    Password: 88056

    bb3934fcafe535313a0f34db16638846


    Code Sign

    Headers

    Imports

    Sections

  • Language/an.txt
  • Language/ar.txt
  • Language/az.txt
  • Language/ba.txt
  • Language/be.txt
  • Language/bg.txt
  • Language/bn.txt
  • Language/ca.txt
  • Language/co.txt
  • Language/cs.txt
  • Language/da.txt
  • Language/de.txt
  • Language/el.txt
  • Language/en-US/AutoWorkplaceN.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 88056


    Headers

    Sections

  • Language/en-US/avicap32.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 88056


    Headers

    Sections

  • Language/eng.txt
  • Language/es.txt
  • Language/et.txt
  • Language/eu.txt
  • Language/ext.txt
  • Language/fa.txt
  • Language/fi.txt
  • Language/fr.txt
  • Language/fur.txt
  • Language/fy.txt
  • Language/ga.txt
  • Language/gl.txt
  • Language/gu.txt
  • Language/he.pak
  • Language/he.txt
  • Language/hi.pak
  • Language/hi.txt
  • Language/hr.pak
  • Language/hr.txt
  • Language/hu.pak
  • Language/hu.txt
  • Language/hy.txt
  • Language/id.txt
  • Language/is.txt
  • Language/it.txt
  • Language/ja.txt
  • Language/ka.txt
  • Language/kaa.txt
  • Language/kab.txt
  • Language/kk.txt
  • Language/ko.txt
  • Language/ku-ckb.txt
  • Language/ky.txt
  • Language/lij.txt
  • Language/lt.txt
  • Language/mk.txt
  • Language/mn.txt
  • Language/mng.txt
  • Language/mng2.txt
  • Language/mr.txt
  • Language/ne.txt
  • Language/nl.txt
  • Language/pa-in.txt
  • Language/pl.txt
  • Language/ps.txt
  • Language/pt-br.txt
  • Language/pt.txt
  • Language/ro.txt
  • Language/ru.txt
  • Language/sa.txt
  • Language/si.txt
  • Language/sk.txt
  • Language/sl.txt
  • Language/sr-spc.txt
  • Language/sr-spl.txt
  • Language/sv.txt
  • Language/sw.txt
  • Language/ta.txt
  • Language/tg.txt
  • Language/th.txt
  • Language/tk.txt
  • Language/tr.txt
  • Language/tt.txt
  • Language/ug.txt
  • Language/uk.txt
  • Language/uz-cyrl.txt
  • Language/uz.txt
  • Language/va.txt
  • Language/vi.txt
  • Language/yo.txt
  • Language/zh-cn.txt
  • Language/zh-tw.txt
  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: 88056

    5805ff58f69999a110b1de51d515a374


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libfilezilla-25.dll
    .dll windows:6 windows x86 arch:x86

    Password: 88056

    f0e7c1eb835b29c12adf1d925008b03b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libfzclient-commonui-private-3-59-0.dll
    .dll windows:6 windows x86 arch:x86

    Password: 88056

    aeb076b4438b73f938871830d4b5420f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libfzclient-private-3-59-0.dll
    .dll windows:6 windows x86 arch:x86

    Password: 88056

    a72f7f43f1b6cdb7f6549844864c4483


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    4f3c83e43ca3a7f2bf90ef920558e79a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libgmp-10.dll
    .dll windows:4 windows x86 arch:x86

    b65b1fd5d3f2469a8136443a4d0554e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libgnutls-30.dll
    .dll windows:4 windows x86 arch:x86

    6a081b4dfce484bfedec248b56d7a13f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libhogweed-6.dll
    .dll windows:4 windows x86 arch:x86

    14c7b6faa277a4370ec33e64db83cffa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libnettle-8.dll
    .dll windows:4 windows x86 arch:x86

    0d0599de81d9e2d172e0761671d6a679


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libpng16-16.dll
    .dll windows:4 windows x86 arch:x86

    03b6c95a4703f0e0454187cc8468ff86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libsqlite3-0.dll
    .dll windows:4 windows x86 arch:x86

    dcede6fc34ce91a0c1c92de12c026f70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    00a57c99b2beef9815f5e915bd7f46fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • picosecond.dxf
  • pursued.vcf
  • resources.pak
  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wxbase30u_gcc_custom.dll
    .dll windows:4 windows x86 arch:x86

    50a3c96ba1080731af031416dede44c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wxbase30u_xml_gcc_custom.dll
    .dll windows:4 windows x86 arch:x86

    189a48fb7831970a2aeb1d4f559c8b1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wxmsw30u_adv_gcc_custom.dll
    .dll windows:4 windows x86 arch:x86

    5da25b1e1a4cacf71bf6335b5166e098


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wxmsw30u_aui_gcc_custom.dll
    .dll windows:4 windows x86 arch:x86

    7b05c36b6b367d752cd41fe71e5c5446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wxmsw30u_core_gcc_custom.dll
    .dll windows:4 windows x86 arch:x86

    c347f674ef7ee9711b45e89a68136d2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wxmsw30u_xrc_gcc_custom.dll
    .dll windows:4 windows x86 arch:x86

    3e4464b25af62ece68205341fedd3216


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    d2bd926944abc29a1a88473c08ce79c1


    Code Sign

    Headers

    Imports

    Exports

    Sections