General

  • Target

    setup.zip

  • Size

    14.1MB

  • MD5

    7ab12aa61f5729225bc631884200f28e

  • SHA1

    d4ab762c120e7e3700eb0c0d2cf5b5b5c90a94fb

  • SHA256

    981dd052899bc22cd3aa56353e50aa0250a7625e0db64dc8a5b4393cd464d246

  • SHA512

    28b51d930feacb0bd8b1a879241102874aa9516bc84e4e8c869876b91fffcf34d73292a04625dab8272c172243496e2801f47cee316a7aff6cdb7559b3777a58

  • SSDEEP

    393216:yriLvKp7U14vcgkaWNuOj5T48z6UGlKloQnSGPR02Z8F:yrtppw4O1T4DlhQLR3Z8F

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • setup.zip
    .zip
  • GSLogging.dll
    .dll windows:5 windows x64 arch:x64

    b0781547b5025ab45cfdaefd982e39b9


    Headers

    Imports

    Exports

    Sections

  • MigrationLibrary.dll
    .dll windows:5 windows x64 arch:x64

    3c12d9528dc44fe846684b5e14dec951


    Headers

    Imports

    Exports

    Sections

  • RAR-password.txt
  • Setup.exe
    .exe windows:5 windows x64 arch:x64

    d6cc3458161fd6b90922f0135215a1d2


    Code Sign

    Headers

    Imports

    Sections

  • config.prx
    .exe windows:5 windows x86 arch:x86

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • mfc100enu.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • mfc100u.dll
    .dll windows:5 windows x64 arch:x64

    bec5def4253dd32f985591c6dfed7c0c


    Code Sign

    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • oelwuva
  • opengl64.dll
    .exe windows:6 windows x64 arch:x64

    12c058d908f07eb19d3f1f0a4bb41bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:5 windows x64 arch:x64

    8701e0a33ce49ca5ab77604c8e59cdc0


    Headers

    Imports

    Exports

    Sections

  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ynmqtc