General

  • Target

    #!SetUp_80631--!PassW0rdz#$$.zip

  • Size

    16.0MB

  • MD5

    1bb8745fe33b21ad09e4c575ffbabf00

  • SHA1

    9c4ffff4aa39f8af9a9638574c98d98e7ab14b42

  • SHA256

    35b40439eaf5e54a201a878787f5e90c7a5bec1c22489443d325c89ebf8d1190

  • SHA512

    300626ed719a1f25a64735cf8030c1f2cb93cede9393f7a98226564209c35a1f0e8d7dfd30ebb5ae6ecff7cd6970a4be4e70340d18b8400c3da66172c2facd7a

  • SSDEEP

    393216:oyvOCke6W1fGZ7mne8trPeDZ7OU5EHWb7LN9jsuuO:oy9WGQ7CtrWFiU6HcF9jsuuO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • #!SetUp_80631--!PassW0rdz#$$.zip
    .zip

    Password: 80631

  • 0pen___files/!?etUp_80631--#PaS?K?y#$$.rar
    .rar

    Password: 80631

  • Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    Password: 80631

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • Language/an.txt
  • Language/ar.txt
  • Language/az.txt
  • Language/ba.txt
  • Language/be.txt
  • Language/bg.txt
  • Language/bn.txt
  • Language/ca.txt
  • Language/co.txt
  • Language/cs.txt
  • Language/da.txt
  • Language/de.txt
  • Language/el.txt
  • Language/eng.txt
  • Language/es.txt
  • Language/et.txt
  • Language/eu.txt
  • Language/ext.txt
  • Language/fa.txt
  • Language/fi.txt
  • Language/fr.txt
  • Language/fur.txt
  • Language/fy.txt
  • Language/ga.txt
  • Language/gl.txt
  • Language/gu.txt
  • Language/he.pak
  • Language/he.txt
  • Language/hi.pak
  • Language/hi.txt
  • Language/hr.pak
  • Language/hr.txt
  • Language/hu.pak
  • Language/hu.txt
  • Language/hy.txt
  • Language/id.txt
  • Language/is.txt
  • Language/it.txt
  • Language/ja.txt
  • Language/ka.txt
  • Language/kaa.txt
  • Language/kab.txt
  • Language/kk.txt
  • Language/ko.txt
  • Language/ku-ckb.txt
  • Language/ky.txt
  • Language/lij.txt
  • Language/lt.txt
  • Language/mk.txt
  • Language/mn.txt
  • Language/mng.txt
  • Language/mng2.txt
  • Language/mr.txt
  • Language/ne.txt
  • Language/nl.txt
  • Language/pa-in.txt
  • Language/pl.txt
  • Language/ps.txt
  • Language/pt-br.txt
  • Language/pt.txt
  • Language/ro.txt
  • Language/ru.txt
  • Language/sa.txt
  • Language/si.txt
  • Language/sk.txt
  • Language/sl.txt
  • Language/sr-spc.txt
  • Language/sr-spl.txt
  • Language/sv.txt
  • Language/sw.txt
  • Language/ta.txt
  • Language/tg.txt
  • Language/th.txt
  • Language/tk.txt
  • Language/tr.txt
  • Language/tt.txt
  • Language/ug.txt
  • Language/uk.txt
  • Language/uz-cyrl.txt
  • Language/uz.txt
  • Language/va.txt
  • Language/vi.txt
  • Language/yo.txt
  • Language/zh-cn.txt
  • Language/zh-tw.txt
  • Locals/am.pak
  • Locals/ar.pak
  • Locals/fi.pak
  • Locals/fil.pak
  • Locals/fr.pak
  • Locals/gu.pak
  • Locals/he.pak
  • Locals/hi.pak
  • Locals/hr.pak
  • Locals/hu.pak
  • Locals/id.pak
  • Locals/lt.pak
  • Locals/lv.pak
  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    Password: 80631

    a893ee6a9f867437d8d76954262e8953


    Code Sign

    Headers

    Imports

    Sections

  • catsfoot.xlsx
  • churchyard.deb
  • datastate.dll
    .dll windows:5 windows x86 arch:x86

    Password: 80631

    b04393022fffb1a5237a1e9ffd54599a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • en-US/AutoWorkplaceN.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 80631


    Headers

    Sections

  • en-US/Paring_[1MB]_[1].exe
    .exe windows:5 windows x86 arch:x86

    Password: 80631

    bb3934fcafe535313a0f34db16638846


    Code Sign

    Headers

    Imports

    Sections

  • en-US/avicap32.dll.mui
    .dll windows:6 windows x86 arch:x86

    Password: 80631


    Headers

    Sections

  • fonts/8514sys.fon
  • fonts/dosapp.fon
  • fonts/smalle.fon
  • fonts/symbol.ttf
  • fonts/trebucbd.ttf
  • fonts/trebucbi.ttf
  • fonts/verdana.ttf
  • fonts/verdanab.ttf
  • madbasic_.bpl
    .dll windows:5 windows x86 arch:x86

    Password: 80631

    ae5a6a29d3cea5a63ad958cfb1a5fb0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pdf2bmp.dll
    .dll windows:6 windows x86 arch:x86

    50fcf2cc98681eec4199907c1b97cd79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pdfium.dll
    .dll windows:5 windows x86 arch:x86

    a5fed7a887d57ee621fb994976dc00b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    7f2e89ebd535b27c805b9455db0d7172


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections