General

  • Target

    NeverLose.cc.zip

  • Size

    15.1MB

  • MD5

    93069c046db04547ccc453289fc6ac43

  • SHA1

    0dd1a52c8b9c5b98e5b96e08cc686e332236b818

  • SHA256

    ff2ded8f8dfec4a5dabed26f7c51b2d1580c70b8889f5cf275787e819632b2a7

  • SHA512

    c028917715710a837625bc355716d6fe9fa103c531a2df913fa8bad78a2992cb7f0ec60910274ff599ae0a41fb7b90ab093408424526cec85e7fe64f560e08a5

  • SSDEEP

    393216:ZFpudKNYJCcz/7t54RJLWXZNb62+9N0PgBmw8qOKso:ZWKNyv/7t56gd+v04BzYo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NeverLose.cc.zip
    .zip

    Password: 123

  • Neverlose.cc/Guide READ ME!!!!.txt
  • Neverlose.cc/YuQu Loader.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Neverlose.cc/cfg/Legit.cfg
  • Neverlose.cc/cfg/Rage.cfg
  • Neverlose.cc/data/debug.txt
  • Neverlose.cc/data/project.xml
    .xml
  • Neverlose.cc/data/remote_settings.ini
  • Neverlose.cc/dll/Load.dll
  • Neverlose.cc/dll/Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    5dc4b26565969216fe39584905c80ce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    1cd41c0abd9e652b8c20ad73c41f45e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    70d4f037a0ab67cbe75e5358a3f3386f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    b9416204924b28aa8c96be9645643488


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libGLESV2.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    abea2434f9b7d3b2a3c225bb90b22116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/libeay32.dll
    .dll windows:6 windows x86 arch:x86

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/dll/ssleay32.dll
    .dll windows:6 windows x86 arch:x86

    073d57b7886016768db36f2bc192c07c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qdds.dll
    .dll windows:6 windows x86 arch:x86

    0edd12175abd0668f206c00bc96d8e3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    d8a3f00ff3fbc59dba9d847ac221e7e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    5e67e8efb78e2d874e73df5b5beeb926


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    b418eeffb2227f3d84fb9a4085d4d42c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    0e3ad0d48dcb1ea61669a0d68f51f6a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    3d2f3c44f0af62ed5c93b2157431d832


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    4a8bc838930a6747ad2f370dde6f5ced


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    c82aefc4c1a131f898f9d67fa8a9d63d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    9ba7981e73e6b29d40b5068912326eeb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    8d8a902193cfbf207d772df08cedf025


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    9d6607e0bc6f62711cae201eebf31e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Neverlose.cc/translations/qt_ca.qm
  • Neverlose.cc/translations/qt_cs.qm
  • Neverlose.cc/translations/qt_de.qm
  • Neverlose.cc/translations/qt_en.qm
  • Neverlose.cc/translations/qt_fi.qm
  • Neverlose.cc/translations/qt_fr.qm
  • Neverlose.cc/translations/qt_he.qm
  • Neverlose.cc/translations/qt_hu.qm
  • Neverlose.cc/translations/qt_it.qm
  • Neverlose.cc/translations/qt_ja.qm
  • Neverlose.cc/translations/qt_ko.qm
  • Neverlose.cc/translations/qt_lv.qm
  • Neverlose.cc/translations/qt_ru.qm
  • Neverlose.cc/translations/qt_sk.qm
  • Neverlose.cc/translations/qt_uk.qm