Resubmissions

27/07/2024, 12:48

240727-p172kazflm 3

27/07/2024, 12:44

240727-pyvnfstbkf 3

General

  • Target

    TrueAncestor_SELF_Resigner_v1.98.zip

  • Size

    1.2MB

  • MD5

    dfd992e7ae8be5545f91b65ffa595849

  • SHA1

    62aba046255d284303b0b07dba4e35cc635418f7

  • SHA256

    c8275ed1281868a0273c1b98bf76d384b77dfcfbe05316dd2babf49b10668d35

  • SHA512

    599df84b7b9474f2c15f7bdb745fc1a15412a7548c9b287403f00b9ee1cd3347fa51be89ed6203e28177030d5f62f3e7c87f668890f85459e07746a0728cb998

  • SSDEEP

    24576:DNpNp5Ciux+UmPKh4IHkRkWn0W/V0cPy0noqRMu7XNpCpV9r2NOr9hvYCCirQJpH:DDNp3UmPKeWsk87V0cPyQRBKOGHQD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • TrueAncestor_SELF_Resigner_v1.98.zip
    .zip
  • data/keys
  • data/ldr_curves
  • data/vsh_curves
  • history.txt
  • resigner.exe
    .exe windows:4 windows x86 arch:x86

    77abcad8d2a58839860bba9dc40f29e1


    Headers

    Imports

    Sections

  • tool/FixELF.exe
    .exe windows:4 windows x86 arch:x86

    b9dcf73bdbbf8a9bd72d4bb4a542c43c


    Headers

    Imports

    Sections

  • tool/Rtlen.exe
    .exe windows:4 windows x86 arch:x86

    1dec20cbcde828b2098d9f8f7f340357


    Headers

    Imports

    Sections

  • tool/klic_bruteforcer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • tool/klics.txt
  • tool/make_fself.exe
    .exe windows:4 windows x86 arch:x86

    0d7238f9b8c87e7705a9436e7e682931


    Headers

    Imports

    Sections

  • tool/make_fself_npdrm.exe
    .exe windows:4 windows x86 arch:x86

    0d7238f9b8c87e7705a9436e7e682931


    Headers

    Imports

    Sections

  • tool/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    66301f135a244b7d18c41c42d33fe434


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/scetool.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • tool/sfk.exe
    .exe windows:4 windows x86 arch:x86

    34b46bd7d2428fa1e1bcd390d2c87135


    Headers

    Imports

    Sections

  • tool/unfself.exe
    .exe windows:4 windows x86 arch:x86

    0a54fe4e852031e54c84c2bdeb3cd921


    Headers

    Imports

    Sections

  • tool/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    66a201125fb55b79ced6d0ecd1985e10


    Headers

    Imports

    Exports

    Sections