Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    TGF_089.exe

  • Size

    5.9MB

  • MD5

    b81793d0df209de909302f9ffd5638f7

  • SHA1

    07a0ba38e41dd442e06b3ce354a544f0cc129f4d

  • SHA256

    063a467d292d4d9031b54881f1f09177d46c552921fd24dc3b68bbf995dbcf9f

  • SHA512

    c47adc7132f445a02ce3eda697bf5db4d4d226980bfc25b603d5b58781282be048154c0c69a4cd7a460c1b8c4769c452f1256e6ee66c49fec8a54a9bdd8a672a

  • SSDEEP

    98304:Aep6llj8L1oYVR2KD952us6V5g49EmwlphS2tnNovN7tp7kNd4CjG47WCSar7n:AeglBeoYf2KR52OV5g4IbhSan4Nx2NdV

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • TGF_089.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Bin/MAC.exe
    .exe windows:5 windows x86 arch:x86

    2da29d83e180f1c32884e847f3d75eac


    Headers

    Imports

    Exports

    Sections

  • Bin/flac.exe
    .exe windows:4 windows x86 arch:x86

    257b494885ee72da971fda02fa193013


    Headers

    Imports

    Sections

  • Bin/lame.exe
    .exe windows:5 windows x86 arch:x86

    225de0e75c232437d4a6629c8dec9e7f


    Headers

    Imports

    Sections

  • Bin/libFLAC_dynamic.dll
    .dll windows:4 windows x86 arch:x86

    83eb8b86b3bd7a59bb4581464a9281a3


    Headers

    Imports

    Exports

    Sections

  • Bin/libogg.dll
    .dll windows:4 windows x86 arch:x86

    a726e89913efc2260483d7f1b246c653


    Headers

    Imports

    Exports

    Sections

  • Bin/libvorbis.dll
    .dll windows:4 windows x86 arch:x86

    4a16bbd21abc345becd121eaeb3a9fff


    Headers

    Imports

    Exports

    Sections

  • Bin/libvorbisfile.dll
    .dll windows:4 windows x86 arch:x86

    be3f11998bc800b61f08c6c074e81018


    Headers

    Imports

    Exports

    Sections

  • Bin/mpcdec.exe
    .exe windows:5 windows x86 arch:x86

    4a5c85f843965e3881b63505aa96cedc


    Headers

    Imports

    Sections

  • Bin/mpcenc.exe
    .exe windows:5 windows x86 arch:x86

    a5e13ecda5cb29a04a20a46e5d2bbae2


    Headers

    Imports

    Sections

  • Bin/oggdec.exe
    .exe windows:4 windows x86 arch:x86

    7a7d827386389a1b5cc40ac379c94275


    Headers

    Imports

    Sections

  • Bin/oggenc.exe
    .exe windows:4 windows x86 arch:x86

    c52fc7f1555ff7466f54f1d38cb33125


    Headers

    Imports

    Sections

  • Bin/xcLAME.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Lng/Liesmich.txt
  • Lng/bulgarian.lng
  • Lng/czech.lng
  • Lng/dutch.lng
  • Lng/finnish.lng
  • Lng/french.lng
  • Lng/german.lng
  • Lng/greek.lng
  • Lng/hungarian.lng
  • Lng/install_fr.txt
  • Lng/install_jp.txt
  • Lng/install_pt-br.txt
  • Lng/italian.lng
  • Lng/japanese.lng
  • Lng/leggimi_it.txt
  • Lng/lithuanian.lng
  • Lng/norwegian.lng
  • Lng/polish.lng
  • Lng/portbras.lng
  • Lng/russian.lng
  • Lng/serbian.lng
  • Lng/spanish.lng
  • Scripts/#AmazonCompilation.scl
  • Scripts/#advanced.scu
  • Scripts/#advanced_id3_ sync.sct
  • Scripts/#amg.sco
  • Scripts/#amg_art.sco
  • Scripts/#amg_xp.sco
  • Scripts/#automate.scl
  • Scripts/#[email protected]
  • Scripts/#discogs.sco
  • Scripts/#example.scv
  • Scripts/#exp_csv.sct
  • Scripts/#exp_html.sct
  • Scripts/#exp_html_grouped.sct
  • Scripts/#exp_text_report.sct
  • Scripts/#export_cue.scl
  • Scripts/#export_html.scl
  • Scripts/#exportm3u.scl
  • Scripts/#filter_track_album.scv
  • Scripts/#formating.scu
  • Scripts/#freedb.sco
  • Scripts/#genre_artist_album.scu
  • Scripts/#get_sort_artist.scv
  • Scripts/#load_cover.sct
  • Scripts/#load_cover_txt.sct
  • Scripts/#load_coverex.sct
  • Scripts/#load_lyrics.sct
  • Scripts/#md5.sct
  • Scripts/#multiple_masks.sct
  • Scripts/#paste_tracks.scl
  • Scripts/#regex.sct
  • Scripts/#ren_tutorial.sct
  • Scripts/#simple.scu
  • Scripts/#split_ artist_title.sct
  • Scripts/#split_ track_title.sct
  • Scripts/#tutorial.sct
  • TheGodFather.exe
    .exe windows:5 windows x86 arch:x86

    35d971bdb7488d2f5665aca3aba4bf73


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • lame.ini
  • lib.ini
  • oggvorbis.ini
  • tgf.chm
    .chm
  • tgf.ini
  • tgf.mdb