General

  • Target

    Autorisoft.zip

  • Size

    17.9MB

  • MD5

    5b879f39e57139ab17300879afa61554

  • SHA1

    a18eab8e257c611f72ea92833584fff0ffaea1f2

  • SHA256

    645e274fec3723d065308f9b16b33392ed7f51fbd5ffc3c00806c2efafb08b65

  • SHA512

    54814430828c204a8b606c000e2efc1fb2586f41c322ebae44d9eba4d297db473d37b520fac02c1bf88407a8a9138a3e7de502e27e32745cd4c96d54c9994ac0

  • SSDEEP

    393216:ZE8wps0kxrkXICtuuL8qgk/H0uxE14p4RToEXkk6hFFh:m2BxoXI6gk/H0u/p4nXkke5

Score
10/10

Malware Config

Signatures

  • Gurcu family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Autorisoft.zip
    .zip

    Password: 123

  • Start.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • gui.lua
  • internal/extensions/CMemoryBlock.lua
  • internal/extensions/CNativeReg.lua
  • internal/extensions/CScriptThread.lua
  • internal/extensions/CScriptThread_EventHandlers.lua
  • internal/extensions/CScriptThread_Timers.lua
  • internal/extensions/Vector.lua
  • internal/extensions/keycodes.lua
  • internal/extensions/vehicles.lua
  • internal/game/AI.lua
  • internal/game/Blip.lua
  • internal/game/Entity.lua
    .js
  • internal/game/Object.lua
  • internal/game/Ped.lua
  • internal/game/Player.lua
  • internal/game/Vehicle.lua
  • internal/game/game.lua
  • internal/game/graphics.lua
  • internal/game/gui.lua
    .js
  • internal/game/gui/simple_menu.lua
    .js
  • internal/game/streaming.lua
  • internal/game/timer.lua
  • internal/game/ui.lua
  • internal/main.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    8372f9bdb7b60abe16299d67674db3d0


    Headers

    Imports

    Exports

    Sections

  • internal/main.lua
  • internal/main_thread.lua
  • internal/modules/addon.lua
  • internal/modules/console/console.lua
  • internal/modules/console/default_commands.lua
  • internal/modules/event.lua
  • internal/modules/scripthookv.lua
  • main.lua
  • main_functions.lua
  • native_call_layout.ini
  • natives.ini