General

  • Target

    main.rar

  • Size

    6.0MB

  • MD5

    4b6c354387fe8a6e9c6209c8e7afe08d

  • SHA1

    ab1e96c0e154100d3b38d20fcf70b975432432fb

  • SHA256

    b9a3c5ebf1c3cd3510e1bbf754cd0c03aac4edd7d2073011ce1dc55c34e15ca3

  • SHA512

    9d398e0d3adff7c9ef6493fdeeb8778e6ad52e3ed007a6216ba44c4c91bda0372701eaeb276ca3f4552664de5049d471ece9856a2b09294f690b6a4954a79c77

  • SSDEEP

    98304:VmeTt05nbrdfJ01YgLklIU91/wDcajRQtm0A9tjQzpfNmPbDiq7H/a:VZEJfa1YgZAeF0AXMYvima

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • main.rar
    .rar
  • main/SynapticsInstaller.exe
    .exe windows:6 windows x86 arch:x86

    d58d3ed69fc89690c2a3bd908e63cf05


    Headers

    Imports

    Sections

  • main/frozen_application_license.txt
  • main/lib/_bz2.pyd
    .dll windows:6 windows x86 arch:x86

    26a54a03352b5d14f60a875cad05d331


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_decimal.pyd
    .dll windows:6 windows x86 arch:x86

    98b01119d7d8ec00edd23d4101ea28b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_hashlib.pyd
    .dll windows:6 windows x86 arch:x86

    32617695b2e0b8c43b93c75b043b84f5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_lzma.pyd
    .dll windows:6 windows x86 arch:x86

    8d42c439389c5df6a73e16e4d5da4aea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_queue.pyd
    .dll windows:6 windows x86 arch:x86

    1bf2876b6e9981815909c5df75b629c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_socket.pyd
    .dll .js windows:6 windows x86 arch:x86 polyglot

    c16f9db67d5e504f6ed928d03eed3e95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_ssl.pyd
    .dll windows:6 windows x86 arch:x86

    07d3ed7301354bddcc5330e34c77ef73


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/_wmi.pyd
    .dll windows:6 windows x86 arch:x86

    9387863d8040cc852d31bf04d2851e0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/certifi/__init__.pyc
  • main/lib/certifi/cacert.pem
  • main/lib/certifi/core.pyc
  • main/lib/charset_normalizer/__init__.pyc
  • main/lib/charset_normalizer/api.pyc
  • main/lib/charset_normalizer/cd.pyc
  • main/lib/charset_normalizer/constant.pyc
  • main/lib/charset_normalizer/legacy.pyc
  • main/lib/charset_normalizer/md.cp312-win32.pyd
    .dll windows:6 windows x86 arch:x86

    ca9e4003fe253e579ababb1c35caa906


    Headers

    Imports

    Exports

    Sections

  • main/lib/charset_normalizer/md__mypyc.cp312-win32.pyd
    .dll windows:6 windows x86 arch:x86

    22a81402d2e9aed8c6f7bf7e80a5e1cf


    Headers

    Imports

    Exports

    Sections

  • main/lib/charset_normalizer/models.pyc
  • main/lib/charset_normalizer/utils.pyc
  • main/lib/charset_normalizer/version.pyc
  • main/lib/collections/__init__.pyc
  • main/lib/collections/abc.pyc
  • main/lib/email/__init__.pyc
  • main/lib/email/_encoded_words.pyc
  • main/lib/email/_header_value_parser.pyc
  • main/lib/email/_parseaddr.pyc
  • main/lib/email/_policybase.pyc
  • main/lib/email/architecture.rst
  • main/lib/email/base64mime.pyc
  • main/lib/email/charset.pyc
  • main/lib/email/contentmanager.pyc
  • main/lib/email/encoders.pyc
  • main/lib/email/errors.pyc
  • main/lib/email/feedparser.pyc
  • main/lib/email/generator.pyc
  • main/lib/email/header.pyc
  • main/lib/email/headerregistry.pyc
  • main/lib/email/iterators.pyc
  • main/lib/email/message.pyc
  • main/lib/email/parser.pyc
  • main/lib/email/policy.pyc
  • main/lib/email/quoprimime.pyc
  • main/lib/email/utils.pyc
  • main/lib/encodings/__init__.pyc
  • main/lib/encodings/aliases.pyc
  • main/lib/encodings/ascii.pyc
  • main/lib/encodings/base64_codec.pyc
  • main/lib/encodings/big5.pyc
  • main/lib/encodings/big5hkscs.pyc
  • main/lib/encodings/bz2_codec.pyc
  • main/lib/encodings/charmap.pyc
  • main/lib/encodings/cp037.pyc
  • main/lib/encodings/cp1006.pyc
  • main/lib/encodings/cp1026.pyc
  • main/lib/encodings/cp1125.pyc
  • main/lib/encodings/cp1140.pyc
  • main/lib/encodings/cp1250.pyc
  • main/lib/encodings/cp1251.pyc
  • main/lib/encodings/cp1252.pyc
  • main/lib/encodings/cp1253.pyc
  • main/lib/encodings/cp1254.pyc
  • main/lib/encodings/cp1255.pyc
  • main/lib/encodings/cp1256.pyc
  • main/lib/encodings/cp1257.pyc
  • main/lib/encodings/cp1258.pyc
  • main/lib/encodings/cp273.pyc
  • main/lib/encodings/cp424.pyc
  • main/lib/encodings/cp437.pyc
  • main/lib/encodings/cp500.pyc
  • main/lib/encodings/cp720.pyc
  • main/lib/encodings/cp737.pyc
  • main/lib/encodings/cp775.pyc
  • main/lib/encodings/cp850.pyc
  • main/lib/encodings/cp852.pyc
  • main/lib/encodings/cp855.pyc
  • main/lib/encodings/cp856.pyc
  • main/lib/encodings/cp857.pyc
  • main/lib/encodings/cp858.pyc
  • main/lib/encodings/cp860.pyc
  • main/lib/encodings/cp861.pyc
  • main/lib/encodings/cp862.pyc
  • main/lib/encodings/cp863.pyc
  • main/lib/encodings/cp864.pyc
  • main/lib/encodings/cp865.pyc
  • main/lib/encodings/cp866.pyc
  • main/lib/encodings/cp869.pyc
  • main/lib/encodings/cp874.pyc
  • main/lib/encodings/cp875.pyc
  • main/lib/encodings/cp932.pyc
  • main/lib/encodings/cp949.pyc
  • main/lib/encodings/cp950.pyc
  • main/lib/encodings/euc_jis_2004.pyc
  • main/lib/encodings/euc_jisx0213.pyc
  • main/lib/encodings/euc_jp.pyc
  • main/lib/encodings/euc_kr.pyc
  • main/lib/encodings/gb18030.pyc
  • main/lib/encodings/gb2312.pyc
  • main/lib/encodings/gbk.pyc
  • main/lib/encodings/hex_codec.pyc
  • main/lib/encodings/hp_roman8.pyc
  • main/lib/encodings/hz.pyc
  • main/lib/encodings/idna.pyc
  • main/lib/encodings/iso2022_jp.pyc
  • main/lib/encodings/iso2022_jp_1.pyc
  • main/lib/encodings/iso2022_jp_2.pyc
  • main/lib/encodings/iso2022_jp_2004.pyc
  • main/lib/encodings/iso2022_jp_3.pyc
  • main/lib/encodings/iso2022_jp_ext.pyc
  • main/lib/encodings/iso2022_kr.pyc
  • main/lib/encodings/iso8859_1.pyc
  • main/lib/encodings/iso8859_10.pyc
  • main/lib/encodings/iso8859_11.pyc
  • main/lib/encodings/iso8859_13.pyc
  • main/lib/encodings/iso8859_14.pyc
  • main/lib/encodings/iso8859_15.pyc
  • main/lib/encodings/iso8859_16.pyc
  • main/lib/encodings/iso8859_2.pyc
  • main/lib/encodings/iso8859_3.pyc
  • main/lib/encodings/iso8859_4.pyc
  • main/lib/encodings/iso8859_5.pyc
  • main/lib/encodings/iso8859_6.pyc
  • main/lib/encodings/iso8859_7.pyc
  • main/lib/encodings/iso8859_8.pyc
  • main/lib/encodings/iso8859_9.pyc
  • main/lib/encodings/johab.pyc
  • main/lib/encodings/koi8_r.pyc
  • main/lib/encodings/koi8_t.pyc
  • main/lib/encodings/koi8_u.pyc
  • main/lib/encodings/kz1048.pyc
  • main/lib/encodings/latin_1.pyc
  • main/lib/encodings/mac_arabic.pyc
  • main/lib/encodings/mac_croatian.pyc
  • main/lib/encodings/mac_cyrillic.pyc
  • main/lib/encodings/mac_farsi.pyc
  • main/lib/encodings/mac_greek.pyc
  • main/lib/encodings/mac_iceland.pyc
  • main/lib/encodings/mac_latin2.pyc
  • main/lib/encodings/mac_roman.pyc
  • main/lib/encodings/mac_romanian.pyc
  • main/lib/encodings/mac_turkish.pyc
  • main/lib/encodings/mbcs.pyc
  • main/lib/encodings/oem.pyc
  • main/lib/encodings/palmos.pyc
  • main/lib/encodings/ptcp154.pyc
  • main/lib/encodings/punycode.pyc
  • main/lib/encodings/quopri_codec.pyc
  • main/lib/encodings/raw_unicode_escape.pyc
  • main/lib/encodings/rot_13.pyc
  • main/lib/encodings/shift_jis.pyc
  • main/lib/encodings/shift_jis_2004.pyc
  • main/lib/encodings/shift_jisx0213.pyc
  • main/lib/encodings/tis_620.pyc
  • main/lib/encodings/undefined.pyc
  • main/lib/encodings/unicode_escape.pyc
  • main/lib/encodings/utf_16.pyc
  • main/lib/encodings/utf_16_be.pyc
  • main/lib/encodings/utf_16_le.pyc
  • main/lib/encodings/utf_32.pyc
  • main/lib/encodings/utf_32_be.pyc
  • main/lib/encodings/utf_32_le.pyc
  • main/lib/encodings/utf_7.pyc
  • main/lib/encodings/utf_8.pyc
  • main/lib/encodings/utf_8_sig.pyc
  • main/lib/encodings/uu_codec.pyc
  • main/lib/encodings/zlib_codec.pyc
  • main/lib/http/__init__.pyc
  • main/lib/http/client.pyc
  • main/lib/http/cookiejar.pyc
  • main/lib/http/cookies.pyc
    .js
  • main/lib/idna/__init__.pyc
  • main/lib/idna/core.pyc
  • main/lib/idna/idnadata.pyc
  • main/lib/idna/intranges.pyc
  • main/lib/idna/package_data.pyc
  • main/lib/idna/uts46data.pyc
  • main/lib/importlib/__init__.pyc
  • main/lib/importlib/_abc.pyc
  • main/lib/importlib/_bootstrap.pyc
  • main/lib/importlib/_bootstrap_external.pyc
  • main/lib/importlib/abc.pyc
  • main/lib/importlib/machinery.pyc
  • main/lib/importlib/metadata/__init__.pyc
  • main/lib/importlib/metadata/_adapters.pyc
  • main/lib/importlib/metadata/_collections.pyc
  • main/lib/importlib/metadata/_functools.pyc
  • main/lib/importlib/metadata/_itertools.pyc
  • main/lib/importlib/metadata/_meta.pyc
  • main/lib/importlib/metadata/_text.pyc
  • main/lib/importlib/readers.pyc
  • main/lib/importlib/resources/__init__.pyc
  • main/lib/importlib/resources/_adapters.pyc
  • main/lib/importlib/resources/_common.pyc
  • main/lib/importlib/resources/_itertools.pyc
  • main/lib/importlib/resources/_legacy.pyc
  • main/lib/importlib/resources/abc.pyc
  • main/lib/importlib/resources/readers.pyc
  • main/lib/importlib/resources/simple.pyc
  • main/lib/importlib/simple.pyc
  • main/lib/importlib/util.pyc
  • main/lib/json/__init__.pyc
  • main/lib/json/decoder.pyc
  • main/lib/json/encoder.pyc
  • main/lib/json/scanner.pyc
  • main/lib/libcrypto-3.dll
    .dll windows:6 windows x86 arch:x86

    7620ed6b3d7c21e576489159c6950490


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/library.dat
  • main/lib/library.zip
    .zip
  • BUILD_CONSTANTS.pyc
  • __future__.pyc
  • __startup__.pyc
  • _collections_abc.pyc
  • _compat_pickle.pyc
  • _compression.pyc
  • _py_abc.pyc
  • _pydatetime.pyc
  • _pydecimal.pyc
  • _strptime.pyc
  • _threading_local.pyc
  • _weakrefset.pyc
  • abc.pyc
  • argparse.pyc
  • ast.pyc
  • base64.pyc
  • bisect.pyc
  • bz2.pyc
  • calendar.pyc
  • certifi-2024.7.4.dist-info/INSTALLER
  • certifi-2024.7.4.dist-info/LICENSE
  • certifi-2024.7.4.dist-info/METADATA
  • certifi-2024.7.4.dist-info/RECORD
  • certifi-2024.7.4.dist-info/WHEEL
  • certifi-2024.7.4.dist-info/top_level.txt
  • charset_normalizer-3.3.2.dist-info/INSTALLER
  • charset_normalizer-3.3.2.dist-info/LICENSE
  • charset_normalizer-3.3.2.dist-info/METADATA
  • charset_normalizer-3.3.2.dist-info/RECORD
  • charset_normalizer-3.3.2.dist-info/WHEEL
  • charset_normalizer-3.3.2.dist-info/entry_points.txt
  • charset_normalizer-3.3.2.dist-info/top_level.txt
  • codecs.pyc
  • contextlib.pyc
  • contextvars.pyc
  • copy.pyc
  • copyreg.pyc
  • csv.pyc
  • dataclasses.pyc
  • datetime.pyc
  • decimal.pyc
  • dis.pyc
  • enum.pyc
  • fnmatch.pyc
  • fractions.pyc
  • ftplib.pyc
    .js
  • functools.pyc
  • genericpath.pyc
  • getopt.pyc
  • getpass.pyc
  • gettext.pyc
  • gzip.pyc
  • hashlib.pyc
  • heapq.pyc
  • hmac.pyc
  • idna-3.7.dist-info/INSTALLER
  • idna-3.7.dist-info/LICENSE.md
  • idna-3.7.dist-info/METADATA
  • idna-3.7.dist-info/RECORD
  • idna-3.7.dist-info/WHEEL
  • inspect.pyc
  • io.pyc
  • ipaddress.pyc
  • keyword.pyc
  • linecache.pyc
  • locale.pyc
  • lzma.pyc
  • mimetypes.pyc
  • netrc.pyc
  • ntpath.pyc
  • nturl2path.pyc
  • numbers.pyc
  • obfsynbs__init__.pyc
  • obfsynbs__main__.pyc
  • opcode.pyc
  • operator.pyc
  • os.pyc
  • pathlib.pyc
  • pickle.pyc
  • platform.pyc
  • posixpath.pyc
  • pprint.pyc
  • py_compile.pyc
  • queue.pyc
  • quopri.pyc
  • random.pyc
  • reprlib.pyc
  • requests-2.32.3.dist-info/INSTALLER
  • requests-2.32.3.dist-info/LICENSE
  • requests-2.32.3.dist-info/METADATA
  • requests-2.32.3.dist-info/RECORD
  • requests-2.32.3.dist-info/WHEEL
  • requests-2.32.3.dist-info/top_level.txt
  • selectors.pyc
  • shutil.pyc
  • signal.pyc
  • socket.pyc
  • ssl.pyc
  • stat.pyc
  • statistics.pyc
  • string.pyc
  • stringprep.pyc
  • struct.pyc
  • subprocess.pyc
  • tarfile.pyc
  • tempfile.pyc
  • textwrap.pyc
  • threading.pyc
  • token.pyc
  • tokenize.pyc
  • traceback.pyc
  • tracemalloc.pyc
  • types.pyc
  • typing.pyc
  • urllib3-2.2.2.dist-info/INSTALLER
  • urllib3-2.2.2.dist-info/METADATA
  • urllib3-2.2.2.dist-info/RECORD
  • urllib3-2.2.2.dist-info/WHEEL
  • warnings.pyc
  • weakref.pyc
  • main/lib/libssl-3.dll
    .dll windows:6 windows x86 arch:x86

    65bdefdeed2467c52577bc23c1fa6881


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/logging/__init__.pyc
  • main/lib/re/__init__.pyc
  • main/lib/re/_casefix.pyc
  • main/lib/re/_compiler.pyc
  • main/lib/re/_constants.pyc
  • main/lib/re/_parser.pyc
  • main/lib/requests/__init__.pyc
  • main/lib/requests/__version__.pyc
  • main/lib/requests/_internal_utils.pyc
  • main/lib/requests/adapters.pyc
    .vbs
  • main/lib/requests/api.pyc
  • main/lib/requests/auth.pyc
  • main/lib/requests/certs.pyc
  • main/lib/requests/compat.pyc
  • main/lib/requests/cookies.pyc
  • main/lib/requests/exceptions.pyc
  • main/lib/requests/help.pyc
  • main/lib/requests/hooks.pyc
  • main/lib/requests/models.pyc
  • main/lib/requests/packages.pyc
  • main/lib/requests/sessions.pyc
  • main/lib/requests/status_codes.pyc
  • main/lib/requests/structures.pyc
  • main/lib/requests/utils.pyc
  • main/lib/select.pyd
    .dll windows:6 windows x86 arch:x86

    37c319d413d161ce73d6da2ae7fa4ba6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/unicodedata.pyd
    .dll windows:6 windows x86 arch:x86

    61987d164cd32f461dd288c9576bc1e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • main/lib/urllib/__init__.pyc
  • main/lib/urllib/error.pyc
  • main/lib/urllib/parse.pyc
  • main/lib/urllib/request.pyc
  • main/lib/urllib/response.pyc
  • main/lib/urllib3/__init__.pyc
  • main/lib/urllib3/_base_connection.pyc
  • main/lib/urllib3/_collections.pyc
  • main/lib/urllib3/_request_methods.pyc
  • main/lib/urllib3/_version.pyc
  • main/lib/urllib3/connection.pyc
  • main/lib/urllib3/connectionpool.pyc
  • main/lib/urllib3/contrib/__init__.pyc
  • main/lib/urllib3/contrib/emscripten/__init__.pyc
  • main/lib/urllib3/contrib/emscripten/connection.pyc
  • main/lib/urllib3/contrib/emscripten/emscripten_fetch_worker.js
    .js
  • main/lib/urllib3/contrib/emscripten/fetch.pyc
  • main/lib/urllib3/contrib/emscripten/request.pyc
  • main/lib/urllib3/contrib/emscripten/response.pyc
  • main/lib/urllib3/contrib/pyopenssl.pyc
    .js
  • main/lib/urllib3/contrib/socks.pyc
  • main/lib/urllib3/exceptions.pyc
  • main/lib/urllib3/fields.pyc
  • main/lib/urllib3/filepost.pyc
  • main/lib/urllib3/poolmanager.pyc
  • main/lib/urllib3/py.typed
  • main/lib/urllib3/response.pyc
  • main/lib/urllib3/util/__init__.pyc
  • main/lib/urllib3/util/connection.pyc
  • main/lib/urllib3/util/proxy.pyc
  • main/lib/urllib3/util/request.pyc
  • main/lib/urllib3/util/response.pyc
  • main/lib/urllib3/util/retry.pyc
  • main/lib/urllib3/util/ssl_.pyc
  • main/lib/urllib3/util/ssl_match_hostname.pyc
  • main/lib/urllib3/util/ssltransport.pyc
    .js
  • main/lib/urllib3/util/timeout.pyc
  • main/lib/urllib3/util/url.pyc
  • main/lib/urllib3/util/util.pyc
  • main/lib/urllib3/util/wait.pyc
  • main/lib/zipfile/__init__.pyc
  • main/lib/zipfile/__main__.pyc
  • main/lib/zipfile/_path/__init__.pyc
  • main/lib/zipfile/_path/glob.pyc
  • main/python3.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • main/python312.dll
    .dll windows:6 windows x86 arch:x86

    cfc6d4cce1fd69ff3e7af533e7a773c7


    Code Sign

    Headers

    Imports

    Exports

    Sections