General

  • Target

    $RWND61L.zip

  • Size

    68.3MB

  • MD5

    618f48ef1762bcb6beb28216b78cbaa3

  • SHA1

    071f97aceb6744b258802ca0f14dc72a0886373c

  • SHA256

    1dad1945cf30b9ce2a72b8a80f3b9a241aaafbc2f5a6623c35a773240ed51c01

  • SHA512

    506427611a545e14c263636716109bb11145dd9dee65f981cde245a7cc995f1b7888b2b16ec898975a874319996b606e1fdf2d9c9b018833ef052a20f6fff875

  • SSDEEP

    1572864:pQ/C8/meAD/sdpNeUwnTfFhvThIwpl8F/qAQ3i9XwxYfv2lxg:pQ/CgGkHWbkdVQ3iZmYfvWxg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • $RWND61L.zip
    .zip
  • Macro/Countries.bin
  • Macro/CryptoPP530Fips32.dll
    .dll windows:4 windows x86 arch:x86

    d6c38e965367a686e74b0b12a0cf6e1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Macro/norecoil/f_00001a
  • Macro/norecoil/f_00001b
  • Macro/norecoil/f_00001c
  • Macro/v2/00007A.dat
  • Macro/v2/00007B.dat
  • Macro/v2/00007C.dat
  • Macro/v2/00007D.dat
  • Macro/v2/00007E.dat
  • Macro/v2/00008A.dat
  • Macro/v8/eax.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    10a283f307e6f4139afad8021396dc78


    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x86 arch:x86

    6dcc8c8ff6147ad4fff786bd7cecf6c3


    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CiCpFips32.dll
    .dll windows:4 windows x86 arch:x86

    bc1438c3e4144dc8db9b210e572fdde1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CiWinCng32.dll
    .dll windows:5 windows x86 arch:x86

    1a5e0def5aa1145793eac6d20aaaa60b


    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/CommonInternal.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource/ahk/chrome_100_percent.pak
  • Resource/ahk/chrome_200_percent.pak
  • Resource/ahk/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    091314120316d822fc9586bfb9c6265f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/ahk/concrt140.dll
    .dll windows:6 windows x86 arch:x86

    a8b026107d3b72f3a87bdc151f131871


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resource/bypassing/0000/_DataPerfCounters_d.ini
  • Resource/lua/Countries.bin
  • Settings/api/Focus0_48000Hz.raw
  • Settings/api/config.xml
    .xml
  • Settings/api/contextMenu.xml
    .xml
  • Settings/api/langs.xml
    .js .xml polyglot
  • Startupe.exe
    .exe windows:6 windows x64 arch:x64

    6d77297695c769ccf52597daade6551a


    Headers

    Imports

    Sections

  • Version/plugins/config/converter.ini
  • Version/themes/rh_binary.png
    .png
  • Version/themes/rh_dlg_edit.png
    .png
  • Version/themes/rh_main_menu.png
    .png
  • Version/themes/rh_mnu_ctrl.png
    .png
  • Version/themes/sample1.h
  • Version/themes/sample1.inc
  • Version/v3/CiCpFips32.dll
    .dll windows:4 windows x86 arch:x86

    404a19d57aa31ad0cb9e16e8e8121076


    Code Sign

    Headers

    Imports

    Exports

    Sections