General

  • Target

    Tibia_Setup_Simple.exe

  • Size

    7.9MB

  • MD5

    8b702fbcc70c15ac482c8a352c8d6f66

  • SHA1

    911b03be0c5b05efbb30cc43985e5990f589de9d

  • SHA256

    40e87b453eee20b6c010483bd7dfb0372e5d1ed8baa196826c13f3bfab8276c9

  • SHA512

    e5ebcaae0faef674599cc9a34b6ba1ee911ca4c016caeea64e0163571c3649b160773b89ca3939470900c52624a9943b2a6a89df4b52d6f2530b67c947e868e6

  • SSDEEP

    196608:X3BmbNwNPsVWG1rmMrlfIx77D6F9vvCp57x4G+4ZR+v:obNoE/p5E6F4p/U4ZR+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • Tibia_Setup_Simple.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    17fb6a8708b9c0bb2d5d8687870eb415


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ddbd50fe6279559edf7d1f1d89b42c2c


    Headers

    Imports

    Exports

    Sections

  • 3rdpartylicences/apache-v2.txt
  • 3rdpartylicences/openssl.txt
  • 3rdpartylicences/qt-3rdparty.txt
  • 3rdpartylicences/qt.txt
  • Qt5Concurrent.dll
    .dll windows:6 windows x86 arch:x86

    0da366d45d7ce157e9b91ae94f1d1344


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    7637b98397764d8d795b817dd3b64bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    71d73a88d84f27af20b4f853ba076790


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    54283f28cc6f35f5a58e73e7c619f587


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    67247ca99f18a41ef96a01b8314c7a19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Tibia.exe
    .exe windows:6 windows x86 arch:x86

    0144d8511076bf5750e150577dd9520b


    Code Sign

    Headers

    Imports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    61f1e91e16b424e953e73b59c843c234


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    5e6c730b75d8fd39bea11d1eda3c5720


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1.dll
    .dll windows:5 windows x86 arch:x86

    1a4728323839926a0cea4a4ffbbfc558


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-1_1.dll
    .dll windows:5 windows x86 arch:x86

    fed3413a3019f260632acc9760eb8c69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6042f1676a7711e459589ef169a5b501


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x86 arch:x86

    60906b3adc1136b7747200c4084a6dab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    885301354f44f5c0640bbf3ef36e93dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qt.conf
  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x86 arch:x86

    cd1ed3d8c92c10d38da7d8062bd9d51a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    274b99a815ba574d8c9e1712916d8b30


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b06d4116da69a513992d529f84731e6f


    Code Sign

    Headers

    Imports

    Exports

    Sections