General

  • Target

    [V2] Flash arch.zip

  • Size

    3.8MB

  • MD5

    b36bd1c67334a5e55b2e5b1f690426e5

  • SHA1

    1325a8302fae08f8249ece6a79262c0f02734fcf

  • SHA256

    4664c1f4b0d3255dd57fcfece0c5fcdcdc2d45db50ee87c8d739dc84c1bf56b8

  • SHA512

    aaf3643db7a173288a82b384025d080eb6df3b32154de3efe44d10771a8c26a73d4e2ff44e8a80775d37917e5bd40504f72d8b7a352ef92203314c4ee7ff660b

  • SSDEEP

    98304:20tW38+YVPtTbfQBIGpZUbu2LOUvACIzWX9ukm4q5ANfsIuTv:/t08P/TbYIG8K26UvACIzWY55AJzuj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • [V2] Flash arch.zip
    .zip

    Password: flash123

  • inst[v2]/BIN/62/33/6233afb8e08943b8f9a0d7d1d17ee8e5
  • inst[v2]/BIN/CHANGES.txt
  • inst[v2]/BIN/ExtraActionBar.lua
  • inst[v2]/BIN/MicroMenu.lua
  • inst[v2]/BIN/PetButton.lua
  • inst[v2]/BIN/Qt5QuickTemplates2.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    696b5d755fc1d4d7c337805bc8a638e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • inst[v2]/BIN/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    ae15fc51ee87015af2fc029c06e0c950


    Headers

    Imports

    Exports

    Sections

  • inst[v2]/BIN/react-sortable-tree-original.scss
  • inst[v2]/[v2] RUN.exe
    .exe windows:4 windows x86 arch:x86

    Password: flash123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • inst[v2]/cjoc.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    5d628e86fd261109ecf91fbade3d7cb8


    Headers

    Imports

    Exports

    Sections

  • inst[v2]/djua.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    42efb2ed3cf083af0935df9565521aa6


    Headers

    Imports

    Exports

    Sections

  • inst[v2]/lua51.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    4824cb5c122af83727114163f01add85


    Headers

    Imports

    Exports

    Sections

  • inst[v2]/source/msdasql.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: flash123

    344fc2db6365ccc91b9e7255e5fb5656


    Headers

    Imports

    Exports

    Sections

  • inst[v2]/source/sw.pak
  • inst[v2]/source/ta.pak
  • inst[v2]/source/te.pak
  • inst[v2]/source/th.pak
  • inst[v2]/sqlxmlx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: flash123

    3392f24326d133e98f8f20b634ebbd87


    Headers

    Imports

    Exports

    Sections