General

  • Target

    virus.zip

  • Size

    68.2MB

  • MD5

    3dccdaa76d7b98b7311d282df2a365f7

  • SHA1

    15c32ef66eea8b26e34bb1aae291e84a9bb91170

  • SHA256

    056e9d3c6051fac9a3312728d260c7cb73c63c87da475baeb8453cbcc7c69b5b

  • SHA512

    d221ff8cbcf586b49aaec9475a397036f932770dc629c0645b2a30c3d3a72463bcbb7b0205aa4f57d2c20feb5eaee86511d2b2a5cb8580a23393797b0da626b1

  • SSDEEP

    1572864:tbmO384gMWCJpwHA8EO2wLNZJ+V/wnMBxCvi38Cwk3f6Y6:sO3HZvwCO2wLNZm/wnHiMa3l6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virus.zip
    .zip
  • virus/About/ChineseS/Cancel.png
    .png
  • virus/About/ChineseS/Next.png
    .png
  • virus/About/ChineseS/Previous.png
    .png
  • virus/About/IA2Marshal.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    647a85e36e41699e332c1c106f975a6f


    Headers

    Imports

    Exports

    Sections

  • virus/About/UI.txt
  • virus/About/qtmultimedia_m3u.dll
    .dll windows:6 windows x86 arch:x86

    d35460b9a3baf35d1aaeb2c0ade3acc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virus/Files/Sourse2/language/ar.qm
  • virus/Files/Sourse2/language/chs.qm
  • virus/Files/Sourse2/language/cht.qm
  • virus/Files/Sourse2/language/de.qm
  • virus/Files/Sourse2/language/en.qm
  • virus/Files/Sourse2/language/es.qm
  • virus/Files/Sourse2/language/fr.qm
  • virus/Files/Sourse2/language/id.qm
  • virus/Files/Sourse2/language/it.qm
  • virus/Files/Sourse2/language/ja.qm
  • virus/Files/Sourse2/language/ko.qm
  • virus/Files/Sourse2/language/pl.qm
  • virus/Files/Sourse2/language/pt.qm
  • virus/Files/Sourse2/language/ru.qm
  • virus/Files/Sourse2/language/th.qm
  • virus/Files/Sourse2/language/tr.qm
  • virus/Files/Sourse2/language/vi.qm
  • virus/Files/Sourse2/qtmultimedia_m3u.dll
    .dll windows:6 windows x86 arch:x86

    d35460b9a3baf35d1aaeb2c0ade3acc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virus/LICENSE.txt
  • virus/Lame.txt
  • virus/Setup-x86/Setup-x86.rar
    .rar
  • virus/Setup.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Antenna
  • $TEMP/Downloading
  • $TEMP/Gold
  • $TEMP/Lee
  • $TEMP/Listed
  • $TEMP/Necessity
  • $TEMP/Vaccine
  • ArnoldJulie/Arctic
  • ArnoldJulie/Aviation
  • ArnoldJulie/Cad
  • ArnoldJulie/Cambridge
  • ArnoldJulie/Decisions
  • ArnoldJulie/Disks
  • ArnoldJulie/Endorsement
  • ArnoldJulie/Eva
  • ArnoldJulie/Extend
  • ArnoldJulie/Hawaiian
  • ArnoldJulie/Honduras
  • ArnoldJulie/Ibm
  • ArnoldJulie/Inns
  • ArnoldJulie/Instrumentation
  • ArnoldJulie/Interest
  • ArnoldJulie/Its
  • ArnoldJulie/Loc
  • ArnoldJulie/Multi
  • ArnoldJulie/Nokia
  • ArnoldJulie/Norwegian
  • ArnoldJulie/Prospects
  • ArnoldJulie/Rage
  • ArnoldJulie/Spa
  • ArnoldJulie/Supporters
  • ArnoldJulie/Tm
  • ArnoldJulie/Transmission
  • ArnoldJulie/Tsunami
  • ArnoldJulie/Wood
  • ArnoldJulie/Worm
  • ArrestedPlugins/Hawk