General

  • Target

    fadba2f2b3f8d1bc0bac5aec37ed9029.bin

  • Size

    22.2MB

  • MD5

    a3e5bb785447b9fc0a3270f82e01bd62

  • SHA1

    640da92657b6438213f3033156cd7357796754d8

  • SHA256

    443058d8384fa38880357e1e204a7f7b156da016082ba2bc3be894f8d336bb0f

  • SHA512

    55f7826f55740ec9571b8717cb30e2db95770c21153805236bed013915d926cffd8f37021a162efc74ad2af9da26f755178b96859233ce65d73f2154127d960f

  • SSDEEP

    393216:JQiSGcObH7CBJVDG0ELBAcRGeV/Q9dYwbtns47ApLXh/F9GlMrnxUXWm0CXdAcYi:JQ03bb2W9LB3GoQXYMns47AnPBCwCXdN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • fadba2f2b3f8d1bc0bac5aec37ed9029.bin
    .zip

    Password: infected

  • 20b31b980496c36a533a278bddae033dba591f14d41d4633c7a915563d12b27c.zip
    .zip

    Password: infected

  • archive/ResIL.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    77b2a6efb5db23bab61e38152791c9e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • archive/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    3ae3956ab1353e92ed1a21ca2229382b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • archive/res_mods/1.23.0.0/scripts/client/gui/mods/7zA.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    1a9deef54b6b9763013f742bee84d533


    Headers

    Imports

    Sections

  • archive/res_mods/1.24.0.0/readme.txt
  • archive/res_mods/1.25.0.0/readme.txt
  • archive/setup.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    48443f812d38a71cb275f2f0138d2567


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (10) — копия.dat
  • archive/update/Uninstall/unins000 — копия (10) — копия.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (11) — копия.dat
  • archive/update/Uninstall/unins000 — копия (11) — копия.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (12) — копия.dat
  • archive/update/Uninstall/unins000 — копия (12) — копия.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (13) — копия.dat
  • archive/update/Uninstall/unins000 — копия (13) — копия.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (2) — копия.dat
  • archive/update/Uninstall/unins000 — копия (2) — копия.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (2).dat
  • archive/update/Uninstall/unins000 — копия (5).exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (6) — копия.dat
  • archive/update/Uninstall/unins000 — копия (6) — копия.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (6).dat
  • archive/update/Uninstall/unins000 — копия (6).exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (7) — копия.dat
  • archive/update/Uninstall/unins000 — копия (7) — копия.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (7).dat
  • archive/update/Uninstall/unins000 — копия (7).exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (8) — копия.dat
  • archive/update/Uninstall/unins000 — копия (8) — копия.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/Uninstall/unins000 — копия (9) — копия.dat
  • archive/update/Uninstall/unins000 — копия (9) — копия.exe
    .exe windows:5 windows x86 arch:x86

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • archive/update/app_type.xml
    .xml
  • archive/update/config.ini
  • archive/update/part1.7z
    .7z
  • archive/update/part2.7z
    .7z
  • archive/update/part3.7z
    .7z
  • archive/version.xml
  • archive/vivoxsdk.dll
    .dll windows:6 windows x86 arch:x86

    efaa61aec68c12fcf59804931c998357


    Code Sign

    Headers

    Imports

    Exports

    Sections