General

  • Target

    cHflash_.zip

  • Size

    5.0MB

  • MD5

    403573572c25270f51d4d007dd2f67fc

  • SHA1

    8dc421415edfe57c85e6dfbf74086aa534f49c9e

  • SHA256

    caee5cd36f3d4c6c8238694476dc95e240baa633a9b78b99e7fb16c5e1fd0fcb

  • SHA512

    812efceb52684a03bfd8041ac0d72871d7b92206f39e192104cb62e809f76b99f46d887e7ee2290b9f61a6f18610ff7028a1c0187c9c7f2bc74e4ee1e0c838c0

  • SSDEEP

    98304:LETE+Xzq+F+k0xz2mTlxNpE8ztMV8O0tW38+YVPtdAg0gubXl3MJWD:I2+F+k0xz5lx7Eent08P/dHIMWD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • cHflash_.zip
    .zip

    Password: flash123

  • F_Install/AltarScript.pex
  • F_Install/BIN/050000003f.idx
  • F_Install/BIN/060000003f.idx
  • F_Install/BIN/62/33/6233afb8e08943b8f9a0d7d1d17ee8e5
  • F_Install/BIN/CHANGES.txt
  • F_Install/BIN/ExtraActionBar.lua
  • F_Install/BIN/MicroMenu.lua
  • F_Install/BIN/PetBar.lua
  • F_Install/BIN/PetButton.lua
  • F_Install/BIN/RepXPBar.lua
  • F_Install/BIN/StanceBar.lua
  • F_Install/BIN/breakpad.dll
    .dll windows:5 windows x86 arch:x86

    Password: flash123

    8988046344f7ab2c3f0ec76ea4dcf911


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • F_Install/BIN/qtANGLE.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    b665fdeb7f064fcf50f92683c0dec3da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • F_Install/JigLibX.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • F_Install/Vinstall.exe
    .exe windows:4 windows x86 arch:x86

    Password: flash123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • F_Install/execute_v.exe
    .exe windows:4 windows x86 arch:x86

    Password: flash123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • F_Install/pops_api.lib
  • F_Install/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    5d628e86fd261109ecf91fbade3d7cb8


    Headers

    Imports

    Exports

    Sections

  • F_Install/source/osgdb_png.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    5666d21328c896e08334acfee1226117


    Headers

    Imports

    Sections

  • F_Install/source/osgdb_serializers_osg.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    59d0814e4fe3a6917d0b4e807f75b015


    Headers

    Imports

    Sections

  • F_Install/source/osgdb_serializers_osganimation.dll
    .dll windows:6 windows x64 arch:x64

    dc26e14ce9622d0ce6ce92e4d1d7b86e


    Headers

    Imports

    Sections

  • F_Install/source/perkdistribute.psc
  • F_Install/source/staminaonhit.psc