General

  • Target

    #!!best-installer_enjoy_pass-8485!!#.zip

  • Size

    17.2MB

  • MD5

    9016303af096b54e19d03373391d8897

  • SHA1

    3b2d877d06df36c09203517a422a2791a1eefa87

  • SHA256

    6dfdad7559456b834b38371959b0f355bc685b8e3a6e80e3279567738e834d1a

  • SHA512

    1b7e333685d5a909248dd29403e5fba155519cb73bcec7c8d0fb97c79bba1bff010412b8ae51cfc5786087816415c37cf93d96b5e27918da67dc44805e3e88f4

  • SSDEEP

    393216:46OH82Kcsz4L6RkfaYwr/f19P/LhLlGTNnNzgcsYsaaFB1egQaK:44nF46kEh9P/VLlG5ndg8aZep7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • #!!best-installer_enjoy_pass-8485!!#.zip
    .zip

    Password: 8485

  • #!!best-installer_enjoy_pass-8485!!#/use_8485_tо_оpen.rar
    .rar

    Password: 8485

  • ICQLiteShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    Password: 8485

    36da04e9d80185202c5dff27d69487ef


    Headers

    Imports

    Exports

    Sections

  • ICQRT.dll
    .dll windows:4 windows x86 arch:x86

    Password: 8485

    eea1a54f9a41b7445dc95356daf71d0a


    Headers

    Imports

    Exports

    Sections

  • Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    Password: 8485

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • Language/an.txt
  • Language/ar.txt
  • Language/az.txt
  • Language/ba.txt
  • Language/be.txt
  • Language/bg.txt
  • Language/bn.txt
  • Language/ca.txt
  • Language/co.txt
  • Language/cs.txt
  • Language/da.txt
  • Language/de.txt
  • Language/el.txt
  • Language/eng.txt
  • Language/es.txt
  • Language/et.txt
  • Language/eu.txt
  • Language/ext.txt
  • Language/fa.txt
  • Language/fi.txt
  • Language/fr.txt
  • Language/fur.txt
  • Language/fy.txt
  • Language/ga.txt
  • Language/gl.txt
  • Language/gu.txt
  • Language/he.pak
  • Language/he.txt
  • Language/hi.pak
  • Language/hi.txt
  • Language/hr.pak
  • Language/hr.txt
  • Language/hu.pak
  • Language/hu.txt
  • Language/hy.txt
  • Language/id.txt
  • Language/is.txt
  • Language/it.txt
  • Language/ja.txt
  • Language/ka.txt
  • Language/kaa.txt
  • Language/kab.txt
  • Language/kk.txt
  • Language/ko.txt
  • Language/ku-ckb.txt
  • Language/ky.txt
  • Language/lij.txt
  • Language/lt.txt
  • Language/mk.txt
  • Language/mn.txt
  • Language/mng.txt
  • Language/mng2.txt
  • Language/mr.txt
  • Language/ne.txt
  • Language/nl.txt
  • Language/pa-in.txt
  • Language/pl.txt
  • Language/ps.txt
  • Language/pt-br.txt
  • Language/pt.txt
  • Language/ro.txt
  • Language/ru.txt
  • Language/sa.txt
  • Language/si.txt
  • Language/sk.txt
  • Language/sl.txt
  • Language/sr-spc.txt
  • Language/sr-spl.txt
  • Language/sv.txt
  • Language/sw.txt
  • Language/ta.txt
  • Language/tg.txt
  • Language/th.txt
  • Language/tk.txt
  • Language/tr.txt
  • Language/tt.txt
  • Language/ug.txt
  • Language/uk.txt
  • Language/uz-cyrl.txt
  • Language/uz.txt
  • Language/va.txt
  • Language/vi.txt
  • Language/yo.txt
  • Language/zh-cn.txt
  • Language/zh-tw.txt
  • LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    Password: 8485

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    Password: 8485

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    Password: 8485

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • Resource/Language/an.txt
  • Resource/Language/ar.txt
  • Resource/Language/az.txt
  • Resource/Language/ba.txt
  • Resource/Language/be.txt
  • Resource/Language/bg.txt
  • Resource/Language/bn.txt
  • Resource/Language/ca.txt
  • Resource/Language/co.txt
  • Resource/Language/cs.txt
  • Resource/Language/da.txt
  • Resource/Language/de.txt
  • Resource/Language/el.txt
  • Resource/Language/eng.txt
  • Resource/Language/es.txt
  • Resource/Language/et.txt
  • Resource/Language/eu.txt
  • Resource/Language/ext.txt
  • Resource/Language/fa.txt
  • Resource/Language/fi.txt
  • Resource/Language/fr.txt
  • Resource/Language/fur.txt
  • Resource/Language/fy.txt
  • Resource/Language/ga.txt
  • Resource/Language/gl.txt
  • Resource/Language/gu.txt
  • Resource/Language/he.pak
  • Resource/Language/he.txt
  • Resource/Language/hi.pak
  • Resource/Language/hi.txt
  • Resource/Language/hr.pak
  • Resource/Language/hr.txt
  • Resource/Language/hu.pak
  • Resource/Language/hu.txt
  • Resource/Language/hy.txt
  • Resource/Language/id.txt
  • Resource/Language/is.txt
  • Resource/Language/it.txt
  • Resource/Language/ja.txt
  • Resource/Language/ka.txt
  • Resource/Language/kaa.txt
  • Resource/Language/kab.txt
  • Resource/Language/kk.txt
  • Resource/Language/ko.txt
  • Resource/Language/ku-ckb.txt
  • Resource/Language/ky.txt
  • Resource/Language/lij.txt
  • Resource/Language/lt.txt
  • Resource/Language/mk.txt
  • Resource/Language/mn.txt
  • Resource/Language/mng.txt
  • Resource/Language/mng2.txt
  • Resource/Language/mr.txt
  • Resource/Language/ne.txt
  • Resource/Language/nl.txt
  • Resource/Language/pa-in.txt
  • Resource/Language/pl.txt
  • Resource/Language/ps.txt
  • Resource/Language/pt-br.txt
  • Resource/Language/pt.txt
  • Resource/Language/ro.txt
  • Resource/Language/ru.txt
  • Resource/Language/sa.txt
  • Resource/Language/si.txt
  • Resource/Language/sk.txt
  • Resource/Language/sl.txt
  • Resource/Language/sr-spc.txt
  • Resource/Language/sr-spl.txt
  • Resource/Language/sv.txt
  • Resource/Language/sw.txt
  • Resource/Language/ta.txt
  • Resource/Language/tg.txt
  • Resource/Language/th.txt
  • Resource/Language/tk.txt
  • Resource/Language/tr.txt
  • Resource/Language/tt.txt
  • Resource/Language/ug.txt
  • Resource/Language/uk.txt
  • Resource/Language/uz-cyrl.txt
  • Resource/Language/uz.txt
  • Resource/Language/va.txt
  • Resource/Language/vi.txt
  • Resource/Language/yo.txt
  • Resource/Language/zh-cn.txt
  • Resource/Language/zh-tw.txt
  • Resource/Locals/am.pak
  • Resource/Locals/ar.pak
  • Resource/Locals/fi.pak
  • Resource/Locals/fil.pak
  • Resource/Locals/fr.pak
  • Resource/Locals/gu.pak
  • Resource/Locals/he.pak
  • Resource/Locals/hi.pak
  • Resource/Locals/hr.pak
  • Resource/Locals/hu.pak
  • Resource/Locals/id.pak
  • Resource/Locals/lt.pak
  • Resource/Locals/lv.pak
  • Resource/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86 arch:x86

    Password: 8485

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resource/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • Resource/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resource/Locals/x64/AdonisUI.xml
    .xml
  • Resource/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • Resource/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • Resource/opengl64.dll
  • Resource/resources.pak
  • Run.exe
    .exe windows:4 windows x86 arch:x86

    e25eb2ecee0497e34c4dbf805fe3c57d


    Headers

    Imports

    Exports

    Sections

  • opengl64
  • Key.png
    .png
  • Password.txt