Resubmissions

05-07-2024 16:45

240705-t9gyys1hrn 10

05-07-2024 16:32

240705-t2a6fa1gnn 10

General

  • Target

    archive.rar

  • Size

    7.9MB

  • MD5

    2ff1ebe2f63c7f6dbd44117379749521

  • SHA1

    e15c6e0a35df53aa99895c641eeb5435238143a8

  • SHA256

    0bfeb9c0d367f6caf4a1dd78b9855a3074930d1197012fbb3ca546b77200e108

  • SHA512

    1a5f3c26e5a09b25b4cd630829e621fcd5bbb13bfad4d38d01ac17aad9a6d95ebaf55920a1e20767943a0d0bbcf6ad540207aec8908279b8170c912f6f837074

  • SSDEEP

    196608:KbNAvWmd0qUAhzMPJ135hwU8N/7At1SuVaQ5iUIGJD+/J:rWmd7UIMPT5hINDAb3vJS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • archive.rar
    .rar

    Password: 1234

  • ResIL.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1234

    77b2a6efb5db23bab61e38152791c9e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1234

    3ae3956ab1353e92ed1a21ca2229382b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • res_mods/1.23.0.0/scripts/client/gui/mods/7zA.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1234

    1a9deef54b6b9763013f742bee84d533


    Headers

    Imports

    Sections

  • res_mods/1.24.0.0/readme.txt
  • res_mods/1.25.0.0/readme.txt
  • setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    448b6888b26145ced7ce018aab459303


    Headers

    Imports

    Sections

  • updates/Uninstall/unins000.dat
  • updates/Uninstall/unins000.exe
    .exe windows:5 windows x86 arch:x86

    Password: 1234

    ab2499e0e72dfad09db9c131cd20670f


    Headers

    Imports

    Sections

  • updates/app_type.xml
    .xml
  • updates/config.ini
  • updates/part1.7z
    .7z

    Password: 1234

  • updates/part2.7z
    .7z

    Password: 1234

  • updates/part3.7z
    .7z

    Password: 1234

  • Just.TankCrashWhite.wotmod
    .zip
  • version.xml
  • vivoxsdk.dll
    .dll windows:6 windows x86 arch:x86

    efaa61aec68c12fcf59804931c998357


    Code Sign

    Headers

    Imports

    Exports

    Sections