General

  • Target

    flash[updated2].zip

  • Size

    5.1MB

  • MD5

    6a4674f31db2b58adf55d187de254160

  • SHA1

    96e6a39671199623458068fd2991c45618b62b57

  • SHA256

    7262126e15ad8222019a3b6b6cb7e720bc05c83b0c7b4c7a0ed0b5aee3f5e94b

  • SHA512

    8e429b05f1710b931b96781d368c4265ccd7c8c5d59f1d2b35a493da56755d810cfa257667ca1cfb0120b932bc113d7ed7a854017d00e8666181a967abd22966

  • SSDEEP

    98304:g0tW38+YVPtX3fQjIG9LOUvACszWX9okm4q5ANfMIuTLg/Bw38ELTo6EWdz:Jt08P/XvIIG96UvACszWS55AJTung/Bk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • flash[updated2].zip
    .zip

    Password: flash123

  • updated installer/BIN/62/33/6233afb8e08943b8f9a0d7d1d17ee8e5
  • updated installer/BIN/CHANGES.txt
  • updated installer/BIN/ExtraActionBar.lua
  • updated installer/BIN/MicroMenu.lua
  • updated installer/BIN/PetButton.lua
  • updated installer/BIN/Qt5QuickTemplates2.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    696b5d755fc1d4d7c337805bc8a638e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updated installer/BIN/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    ae15fc51ee87015af2fc029c06e0c950


    Headers

    Imports

    Exports

    Sections

  • updated installer/BIN/qtANGLE.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    b665fdeb7f064fcf50f92683c0dec3da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updated installer/BIN/react-sortable-tree-original.scss
  • updated installer/cjoc.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    5d628e86fd261109ecf91fbade3d7cb8


    Headers

    Imports

    Exports

    Sections

  • updated installer/djua.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    42efb2ed3cf083af0935df9565521aa6


    Headers

    Imports

    Exports

    Sections

  • updated installer/execute_v2].exe
    .exe windows:4 windows x86 arch:x86

    Password: flash123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • updated installer/lua51.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    4824cb5c122af83727114163f01add85


    Headers

    Imports

    Exports

    Sections

  • updated installer/source/msdasql.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: flash123

    344fc2db6365ccc91b9e7255e5fb5656


    Headers

    Imports

    Exports

    Sections

  • updated installer/source/sw.pak
  • updated installer/source/ta.pak
  • updated installer/source/te.pak
  • updated installer/source/th.pak
  • updated installer/sqlxmlx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    3392f24326d133e98f8f20b634ebbd87


    Headers

    Imports

    Exports

    Sections