General

  • Target

    DEV-windows-2.1.1.zip

  • Size

    35.3MB

  • MD5

    f38b1ea6c462c3a22e505d982007bec6

  • SHA1

    644d0eb58cf8e301e74d8e275892cd8e512eaa32

  • SHA256

    6eb95473f07ba06f2b752ab77e75d58299f26568d9a0fd801cc41ae384e008f5

  • SHA512

    a76aceee477f92ce7d549e20302fb851d532b848772e4f633e0b0d6e512a02316aad492761e9facad751de3bee9183712a0defbc6e634ba80e2257fec47e507e

  • SSDEEP

    786432:tisd6Eat6t5d5zqGwlwj6LFOJ7pSRoH8xAfwku1GkkCTa/7DCgMas:+p6tRWkjYoH8x4MGkkSkCgMas

Score
3/10

Malware Config

Signatures

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • DEV-windows-2.1.1.zip
    .zip
  • Firefox/AccessibleHandler.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    68d8bad9ea1efefd2a841fa979932666


    Headers

    Imports

    Exports

    Sections

  • Firefox/AccessibleMarshal.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    e4b3504f1f05932834c3a08c14d59a24


    Headers

    Imports

    Exports

    Sections

  • Firefox/IA2Marshal.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    dfcb01dae2deff7d099a4f9eeaf41845


    Headers

    Imports

    Exports

    Sections

  • Firefox/breakpadinjector.dll
    .dll windows:6 windows x86 arch:x86

    423af8aeaebeda5a60577ddbf82be307


    Headers

    Imports

    Exports

    Sections

  • Firefox/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    2c54251b196d9e0cc804a7061f60558c


    Headers

    Imports

    Exports

    Sections

  • Firefox/lgpllibs.dll
    .dll windows:6 windows x86 arch:x86

    9077bc892f80f34239af08a83206a6f2


    Headers

    Imports

    Exports

    Sections

  • Firefox/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    5869573158f1280c462da5ead76ffd22


    Headers

    Imports

    Exports

    Sections

  • Firefox/libGLESv2.dll
    .dll windows:6 windows x86 arch:x86

    7086501f62145c9e3d76ff553005aaae


    Headers

    Imports

    Exports

    Sections

  • Firefox/mozavcodec.dll
    .dll windows:6 windows x86 arch:x86

    e8b38299159013a2da9334fc564e1c55


    Headers

    Imports

    Exports

    Sections

  • Firefox/mozavutil.dll
    .dll windows:6 windows x86 arch:x86

    1d4f967cefd842773e81d97b71c6cd84


    Headers

    Imports

    Exports

    Sections

  • Firefox/mozglue.dll
    .dll windows:6 windows x86 arch:x86

    d19bc79aad8facafc2b9d0b48a3005f7


    Headers

    Imports

    Exports

    Sections

  • Firefox/nss3.dll
    .dll windows:6 windows x86 arch:x86

    2787474bd97da0f1af4a42831c81301e


    Headers

    Imports

    Exports

    Sections

  • Firefox/nssckbi.dll
    .dll windows:6 windows x86 arch:x86

    974f7cca14d8a1fd15587253239a48c2


    Headers

    Imports

    Exports

    Sections

  • Firefox/nssdbm3.dll
    .dll windows:6 windows x86 arch:x86

    518bea24c94815d231768f17a67fa423


    Headers

    Imports

    Exports

    Sections

  • Firefox/omni.ja
  • Firefox/plugin-container.exe
    .exe windows:6 windows x86 arch:x86

    f3d20ff98e14bf559b72a07402f09122


    Headers

    Imports

    Exports

    Sections

  • Firefox/plugin-hang-ui.exe
    .exe windows:6 windows x86 arch:x86

    6e3c828521df76635b809646222e5890


    Headers

    Imports

    Sections

  • Firefox/qipcap.dll
    .dll windows:6 windows x86 arch:x86

    f581dee044db52f8ff533657d5c81221


    Headers

    Imports

    Sections

  • Firefox/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    cbf7e2f3b2d8ed65d5f034fc8ca9c352


    Headers

    Imports

    Exports

    Sections

  • Firefox/xul.dll
    .dll windows:6 windows x86 arch:x86

    b61802ec10a0ffd4cdf6dc9635d38bf3


    Headers

    Imports

    Exports

    Sections

  • Geckofx-Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Geckofx-Winforms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • HtmlAgilityPack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • HtmlAgilityPack.pdb
  • HtmlAgilityPack.xml
    .xml
  • NLog.config
  • NLog.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NLog.xml
    .js .xml polyglot
  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.xml
    .xml
  • RestSharp.Serializers.Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RestSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • RestSharp.xml
    .xml
  • SACModuleBase.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SACModuleBase.pdb
  • SteamAccCreator.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • SteamAccCreator.exe.config
    .xml
  • System.Data.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Diagnostics.StackTrace.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Diagnostics.Tracing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Globalization.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.IO.Compression.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Net.Http.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Net.Sockets.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.Serialization.Primitives.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Security.Cryptography.Algorithms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Security.SecureString.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Threading.Overlapped.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Xml.XPath.XDocument.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Yove.Proxy.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections