General

  • Target

    2024_open.zip

  • Size

    15.6MB

  • MD5

    b677d3fe7c48bf3ffcdc60ebc6d7af69

  • SHA1

    6d72e1a63a62cdf79d2fac6d70105bf5a2ec0eee

  • SHA256

    e3aeac9868e2e50ef31709a99413d4fd0f6ffde58887e992ff994f8a0cb97aa8

  • SHA512

    e639643b90d788aa4c266af020da41f0af724a9fce4cc0d513844afe806b7f8719bfc242bab5756f08004b6f75680b6471fbc470dea5a80a00e2288716826a73

  • SSDEEP

    393216:SuMjZNcx0my+PnvkPLXRCbtcfflpnFrFQND/iA0uLQKw:lOXcxI+PcPzshcV7+9iZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024_open.zip
    .zip
  • 2024_open/ICQLiteShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    36da04e9d80185202c5dff27d69487ef


    Headers

    Imports

    Exports

    Sections

  • 2024_open/ICQRT.dll
    .dll windows:4 windows x86 arch:x86

    eea1a54f9a41b7445dc95356daf71d0a


    Headers

    Imports

    Exports

    Sections

  • 2024_open/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • 2024_open/Language/an.txt
  • 2024_open/Language/ar.txt
  • 2024_open/Language/az.txt
  • 2024_open/Language/ba.txt
  • 2024_open/Language/be.txt
  • 2024_open/Language/bg.txt
  • 2024_open/Language/bn.txt
  • 2024_open/Language/ca.txt
  • 2024_open/Language/co.txt
  • 2024_open/Language/cs.txt
  • 2024_open/Language/da.txt
  • 2024_open/Language/de.txt
  • 2024_open/Language/el.txt
  • 2024_open/Language/eng.txt
  • 2024_open/Language/es.txt
  • 2024_open/Language/et.txt
  • 2024_open/Language/eu.txt
  • 2024_open/Language/ext.txt
  • 2024_open/Language/fa.txt
  • 2024_open/Language/fi.txt
  • 2024_open/Language/fr.txt
  • 2024_open/Language/fur.txt
  • 2024_open/Language/fy.txt
  • 2024_open/Language/ga.txt
  • 2024_open/Language/gl.txt
  • 2024_open/Language/gu.txt
  • 2024_open/Language/he.pak
  • 2024_open/Language/he.txt
  • 2024_open/Language/hi.pak
  • 2024_open/Language/hi.txt
  • 2024_open/Language/hr.pak
  • 2024_open/Language/hr.txt
  • 2024_open/Language/hu.pak
  • 2024_open/Language/hu.txt
  • 2024_open/Language/hy.txt
  • 2024_open/Language/id.txt
  • 2024_open/Language/is.txt
  • 2024_open/Language/it.txt
  • 2024_open/Language/ja.txt
  • 2024_open/Language/ka.txt
  • 2024_open/Language/kaa.txt
  • 2024_open/Language/kab.txt
  • 2024_open/Language/kk.txt
  • 2024_open/Language/ko.txt
  • 2024_open/Language/ku-ckb.txt
  • 2024_open/Language/ky.txt
  • 2024_open/Language/lij.txt
  • 2024_open/Language/lt.txt
  • 2024_open/Language/mk.txt
  • 2024_open/Language/mn.txt
  • 2024_open/Language/mng.txt
  • 2024_open/Language/mng2.txt
  • 2024_open/Language/mr.txt
  • 2024_open/Language/ne.txt
  • 2024_open/Language/nl.txt
  • 2024_open/Language/pa-in.txt
  • 2024_open/Language/pl.txt
  • 2024_open/Language/ps.txt
  • 2024_open/Language/pt-br.txt
  • 2024_open/Language/pt.txt
  • 2024_open/Language/ro.txt
  • 2024_open/Language/ru.txt
  • 2024_open/Language/sa.txt
  • 2024_open/Language/si.txt
  • 2024_open/Language/sk.txt
  • 2024_open/Language/sl.txt
  • 2024_open/Language/sr-spc.txt
  • 2024_open/Language/sr-spl.txt
  • 2024_open/Language/sv.txt
  • 2024_open/Language/sw.txt
  • 2024_open/Language/ta.txt
  • 2024_open/Language/tg.txt
  • 2024_open/Language/th.txt
  • 2024_open/Language/tk.txt
  • 2024_open/Language/tr.txt
  • 2024_open/Language/tt.txt
  • 2024_open/Language/ug.txt
  • 2024_open/Language/uk.txt
  • 2024_open/Language/uz-cyrl.txt
  • 2024_open/Language/uz.txt
  • 2024_open/Language/va.txt
  • 2024_open/Language/vi.txt
  • 2024_open/Language/yo.txt
  • 2024_open/Language/zh-cn.txt
  • 2024_open/Language/zh-tw.txt
  • 2024_open/LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • 2024_open/LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • 2024_open/Resource/CMap/Identity-H
  • 2024_open/Resource/CMap/Identity-V
  • 2024_open/Resource/CMap/UCS2-GBK-EUC
  • 2024_open/Resource/CMap/UniKS-UTF16-H
  • 2024_open/Resource/CMap/UniKS-UTF16-V
  • 2024_open/Resource/Font/AdobePIStd.otf
  • 2024_open/Resource/Font/CourierStd-Bold.otf
  • 2024_open/Resource/Font/CourierStd-BoldOblique.otf
  • 2024_open/Resource/Font/CourierStd-Oblique.otf
  • 2024_open/Resource/Font/CourierStd.otf
  • 2024_open/Resource/Font/MinionPro-Bold.otf
  • 2024_open/Resource/Font/MinionPro-BoldIt.otf
  • 2024_open/Resource/Font/MinionPro-It.otf
  • 2024_open/Resource/Font/MinionPro-Regular.otf
  • 2024_open/Resource/Font/MyriadPro-Bold.otf
  • 2024_open/Resource/Font/MyriadPro-BoldIt.otf
  • 2024_open/Resource/Font/MyriadPro-It.otf
  • 2024_open/Resource/Font/MyriadPro-Regular.otf
  • 2024_open/Resource/Font/Pfm/SY______.PFM
  • 2024_open/Resource/Font/Pfm/zx______.pfm
  • 2024_open/Resource/Font/Pfm/zy______.pfm
  • 2024_open/Resource/Font/SY______.PFB
  • 2024_open/Resource/Font/ZX______.PFB
  • 2024_open/Resource/Font/ZY______.PFB
  • 2024_open/Resource/Locals/am.pak
  • 2024_open/Resource/Locals/ar.pak
  • 2024_open/Resource/Locals/fi.pak
  • 2024_open/Resource/Locals/fil.pak
  • 2024_open/Resource/Locals/fr.pak
  • 2024_open/Resource/Locals/gu.pak
  • 2024_open/Resource/Locals/he.pak
  • 2024_open/Resource/Locals/hi.pak
  • 2024_open/Resource/Locals/hr.pak
  • 2024_open/Resource/Locals/hu.pak
  • 2024_open/Resource/Locals/id.pak
  • 2024_open/Resource/Locals/lt.pak
  • 2024_open/Resource/Locals/lv.pak
  • 2024_open/Resource/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 2024_open/Resource/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • 2024_open/Resource/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 2024_open/Resource/Locals/x64/AdonisUI.xml
    .xml
  • 2024_open/Resource/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2024_open/Resource/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • 2024_open/Resource/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • 2024_open/Resource/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 2024_open/Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • 2024_open/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • 2024_open/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • 2024_open/Resource/opengl64.dll
  • 2024_open/Resource/resources.pak
  • 2024_open/Sеt-up.exe
    .exe windows:4 windows x86 arch:x86

    196992c146062db84cbd73903ca4b0ad


    Headers

    Imports

    Exports

    Sections

  • 2024_open/opengl64