General

  • Target

    test.rar

  • Size

    18.1MB

  • MD5

    d546057ffe6649513ed96c4f16eef4f8

  • SHA1

    8a910ca1da2e12bc31f14c81e106f931d909077d

  • SHA256

    e773b81cd50cc390d08a3eca581b9b27daae1ae2f0ea317bc98ba5655d915130

  • SHA512

    c2d9bd7bfd9f5a56a89e5ee511c856de8540e02015615e3665f024436eaea217fb76fc5355b15925f9403f51d5614d1c5ed18c3849d49466d62021a2c7abcaca

  • SSDEEP

    393216:CaRFKZ90dHrQyOegD/H4F18PDT+NITVTwXAKYunGe0E299ug8:CaRFKZydHzOeWHgAT5BKzToig8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • test.rar
    .rar

    Password: adwd

  • Custom.dll
    .dll windows:6 windows x64 arch:x64

    Password: adwd

    3c0e70bfa5f73f1f1cef484e2bcb5bf8


    Headers

    Imports

    Exports

    Sections

  • Davigo_Data/Plugins/x86_64/steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    Password: adwd

    289b2254a2c1e14995dd9995d1686fdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OnlineFix.ini
  • OnlineFix.url
  • OnlineFix64.dll
    .dll windows:6 windows x64 arch:x64

    Password: adwd

    10c1b70987e42d05f256c6e82924ec7e


    Headers

    Imports

    Exports

    Sections

  • SteamOverlay64.dll
    .dll windows:6 windows x64 arch:x64

    Password: adwd

    fd9c9736fbc202d1a20e83d97ea0979b


    Headers

    Imports

    Exports

    Sections

  • dlllist.txt
  • winmm.dll
    .dll windows:6 windows x64 arch:x64

    Password: adwd

    d87c96e86984e394d8b76e8b7350cb52


    Headers

    Imports

    Exports

    Sections