General

  • Target

    shi.rar

  • Size

    789KB

  • MD5

    42215af6eae63cb69b8c466b7778f64e

  • SHA1

    8f0d71a50244a60bf05e9a7f6acd18857ee912a4

  • SHA256

    ac3f952987e903405c507219c86c197ae040472585f50f4584bdc6a5fe45f99e

  • SHA512

    126f66535d576af537181290628d36f2511ac0fd48083ee92afe60ebe33fff46d8ca8e5037241faba7f65deffb75ba901f607e955d9e95898393af517499a1d8

  • SSDEEP

    12288:HYTMmlZb0pDv+dzXQ/Dui7dX2rkYbB9ZdMZYVQ0HFw2Bo05rsErZaUumuLltk:HYomEpDmdI7ErDb0ZYvlDImZNumkltk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • shi.rar
    .rar
  • shi/Chaos.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • shi/ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • shi/TidalAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • shi/ui.deps.json
  • shi/ui.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • shi/ui.runtimeconfig.json