General

  • Target

    Noura.rar

  • Size

    54.2MB

  • MD5

    4014ea48fdc48ab4e767d15bb82ad25e

  • SHA1

    cf26947fededfb4a40a5e2fe1c10ff1755defb01

  • SHA256

    b06e01a32aba9fd8dd3f9af0093dd43726bf242873709dc411a5f38319795625

  • SHA512

    6e47a07adae2d48b9a4ff42a9fba6c8583ce9aee636c442ac700b8f52ef2188882975d4643937226fcee262616d514ab7fe3b7a4759bef10ad787a3217dd8a79

  • SSDEEP

    1572864:xVgf/ckhq5wdTzM2ld6sLYcw/sgmb/SGzvJx:xVSEwdUa6sLjKsgmb/SGVx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Noura.rar
    .rar

    Password: noura

  • Noura.exe
    .exe windows:6 windows x86 arch:x86

    Password: noura

    952d690e7407c6921c33f330003b272a


    Code Sign

    Headers

    Imports

    Sections

  • dll/AcXtrnal.dll
    .dll windows:6 windows x64 arch:x64

    Password: noura

    d5e684c2960f27fa0d1818bb9f6d8d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: noura

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/accore.dll
    .dll windows:6 windows x64 arch:x64

    Password: noura

    d160f055904c1d8bb1f9a35edebbfd45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/acproxy.dll
    .dll windows:6 windows x64 arch:x64

    Password: noura

    ddec9c0ad1b79349ee08e9fb9defe28e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/alibabacloud-oss-cpp-sdk.dll
    .dll windows:6 windows x64 arch:x64

    Password: noura

    7d8de00ef9bfbb837180b559954998f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/kernel32.dll
    .dll windows:6 windows x64 arch:x64

    Password: noura

    31328a3cacc162a9ceb1ef6ec692fcb4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/libGLESV2.dll
    .dll windows:6 windows x86 arch:x86

    Password: noura

    abea2434f9b7d3b2a3c225bb90b22116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/libeay32.dll
    .dll windows:6 windows x86 arch:x86

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/mfc140.dll
    .dll windows:6 windows x64 arch:x64

    79866bf350529b983a801759067cf66d


    Code Sign

    Headers

    Imports

    Sections

  • dll/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dll/pakchunk10optional-WindowsClient.utoc
  • dll/wininet.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    6adb8f4093077f6949dd162da29572bb


    Headers

    Imports

    Exports

    Sections

  • translations/qt_ca.qm
  • translations/qt_cs.qm
  • translations/qt_de.qm
  • translations/qt_en.qm
  • translations/qt_fi.qm
  • translations/qt_fr.qm
  • translations/qt_he.qm
  • translations/qt_hu.qm
  • translations/qt_it.qm
  • translations/qt_ja.qm
  • translations/qt_ko.qm
  • translations/qt_lv.qm
  • translations/qt_ru.qm
  • translations/qt_sk.qm
  • translations/qt_uk.qm
  • ult.ucas