General

  • Target

    9192 (extract.me).zip

  • Size

    31.1MB

  • MD5

    e168ca1a5c7de5c5ceebba1a574a58df

  • SHA1

    b400432683431963bfbd94015c3e95ea912932f0

  • SHA256

    40c800b617f32b51265f2a540ddc5d37a00b00adade836b7ded8165265cc7d81

  • SHA512

    364abb1dc69d18584a9e9d74fefcd1a744e09d013e2bbaad323d529d77b28b66712fe555ea3336fa0c142e38ba44af97d7a6ad8d0720eee519b95f5ef1ea1cbb

  • SSDEEP

    786432:VTwhkvrQWS4Ro7Kiw1CY/IIHBqzQu5OUS4FvlqcXAbzrbnfwU81fIzRTkb1JzV0C:6hkjQWF4KiwwmIIoE07S4ltAbzrzR81n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 9192 (extract.me).zip
    .zip
  • Libs/Extreme.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Libs/Injecting.dll
    .dll windows:6 windows x64 arch:x64

    489e398f49ceeda3418bb4d259205037


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Libs/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    a44c6eed545a636cf24d9bf63188ef0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Libs/libgcc_s_dw2-1.dll
    .dll windows:6 windows x86 arch:x86

    72e2cd9e129b18aa647a30bd6ed95591


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Projects/Manager.cpp
  • Projects/Source.cpp
  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    c79c83a78d1e1763a4ee4174740f2404


    Code Sign

    Headers

    Imports

    Sections

  • config.prx
    .exe windows:5 windows x86 arch:x86

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • d3dx9_43.dll
    .dll windows:6 windows x86 arch:x86

    5fb75b2a87c1fa7cc3d7904a0b97084a


    Headers

    Imports

    Exports

    Sections

  • fyebchk
  • mfc100u.dll
    .dll windows:5 windows x64 arch:x64

    bec5def4253dd32f985591c6dfed7c0c


    Code Sign

    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opengl64.dll
    .exe windows:6 windows x64 arch:x64

    12c058d908f07eb19d3f1f0a4bb41bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/CryptoPP530Fips32.dll
    .dll windows:4 windows x86 arch:x86

    d6c38e965367a686e74b0b12a0cf6e1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/CryptoPP530Fips64.dll
    .dll windows:4 windows x64 arch:x64

    47c7d73bcbd956569415ba59e9f3031d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/FlowSshC32.dll
    .dll windows:5 windows x86 arch:x86

    84d46400eaae645a88dad66ce90b9fb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/FlowSshC64.dll
    .dll windows:5 windows x64 arch:x64

    ee2e6d48ce061568a99f225d07587a30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VisualStudio.VsWebProtocol
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • plugins/NvStWiz
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • plugins/StartupHelper
    .exe windows:5 windows x86 arch:x86

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • plugins/cache/ICQLiteShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    36da04e9d80185202c5dff27d69487ef


    Headers

    Imports

    Exports

    Sections

  • plugins/cache/ICQRT.dll
    .dll windows:4 windows x86 arch:x86

    eea1a54f9a41b7445dc95356daf71d0a


    Headers

    Imports

    Exports

    Sections

  • plugins/cache/Language/LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • plugins/cache/Language/LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • plugins/cache/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • plugins/cache/Language/an.txt
  • plugins/cache/Language/ar.txt
  • plugins/cache/Language/az.txt
  • plugins/cache/Language/ba.txt
  • plugins/cache/Language/be.txt
  • plugins/cache/Language/bg.txt
  • plugins/cache/Language/bn.txt
  • plugins/cache/Language/ca.txt
  • plugins/cache/Language/co.txt
  • plugins/cache/Language/cs.txt
  • plugins/cache/Language/da.txt
  • plugins/cache/Language/de.txt
  • plugins/cache/Language/el.txt
  • plugins/cache/Language/eng.txt
  • plugins/cache/Language/es.txt
  • plugins/cache/Language/et.txt
  • plugins/cache/Language/eu.txt
  • plugins/cache/Language/ext.txt
  • plugins/cache/Language/fa.txt
  • plugins/cache/Language/fi.txt
  • plugins/cache/Language/fr.txt
  • plugins/cache/Language/fur.txt
  • plugins/cache/Language/fy.txt
  • plugins/cache/Language/ga.txt
  • plugins/cache/Language/gl.txt
  • plugins/cache/Language/gu.txt
  • plugins/cache/Language/he.pak
  • plugins/cache/Language/he.txt
  • plugins/cache/Language/hi.pak
  • plugins/cache/Language/hi.txt
  • plugins/cache/Language/hr.pak
  • plugins/cache/Language/hr.txt
  • plugins/cache/Language/hu.pak
  • plugins/cache/Language/hu.txt
  • plugins/cache/Language/hy.txt
  • plugins/cache/Language/id.txt
  • plugins/cache/Language/is.txt
  • plugins/cache/Language/it.txt
  • plugins/cache/Language/ja.txt
  • plugins/cache/Language/ka.txt
  • plugins/cache/Language/kaa.txt
  • plugins/cache/Language/kab.txt
  • plugins/cache/Language/kk.txt
  • plugins/cache/Language/ko.txt
  • plugins/cache/Language/ku-ckb.txt
  • plugins/cache/Language/ky.txt
  • plugins/cache/Language/lij.txt
  • plugins/cache/Language/lt.txt
  • plugins/cache/Language/madHcNet32.dll
    .dll windows:5 windows x86 arch:x86

    1e157842e5cd99d6e1fd082c5f35c9fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/cache/Language/mk.txt
  • plugins/cache/Language/mn.txt
  • plugins/cache/Language/mng.txt
  • plugins/cache/Language/mng2.txt
  • plugins/cache/Language/mr.txt
  • plugins/cache/Language/mvrSettings32.dll
    .dll windows:5 windows x86 arch:x86

    e143d001bea94d24e61013ddbd97bbf0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/cache/Language/ne.txt
  • plugins/cache/Language/nl.txt
  • plugins/cache/Language/nolimetangere.pkg
  • plugins/cache/Language/pa-in.txt
  • plugins/cache/Language/pl.txt
  • plugins/cache/Language/ps.txt
  • plugins/cache/Language/pt-br.txt
  • plugins/cache/Language/pt.txt
  • plugins/cache/Language/ro.txt
  • plugins/cache/Language/ru.txt
  • plugins/cache/Language/sa.txt
  • plugins/cache/Language/si.txt
  • plugins/cache/Language/sk.txt
  • plugins/cache/Language/sl.txt
  • plugins/cache/Language/sr-spc.txt
  • plugins/cache/Language/sr-spl.txt
  • plugins/cache/Language/sv.txt
  • plugins/cache/Language/sw.txt
  • plugins/cache/Language/ta.txt
  • plugins/cache/Language/tg.txt
  • plugins/cache/Language/th.txt
  • plugins/cache/Language/tk.txt
  • plugins/cache/Language/tr.txt
  • plugins/cache/Language/tt.txt
  • plugins/cache/Language/ug.txt
  • plugins/cache/Language/uk.txt
  • plugins/cache/Language/unrar.dll
    .dll windows:5 windows x86 arch:x86

    97687a07538d3932fb9baf861b959f5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/cache/Language/uz-cyrl.txt
  • plugins/cache/Language/uz.txt
  • plugins/cache/Language/va.txt
  • plugins/cache/Language/vi.txt
  • plugins/cache/Language/yo.txt
  • plugins/cache/Language/zh-cn.txt
  • plugins/cache/Language/zh-tw.txt
  • plugins/cache/acceptancy.svg
  • plugins/cache/opengl64
  • plugins/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • plugins/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • ucjc
  • updater/NvStWiz.prx
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • updater/manager/ks_tyres.ini
  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections