General

  • Target

    Rebina.zip

  • Size

    35.1MB

  • MD5

    2a8a9a89dd0a8570e1aa64e4bf875100

  • SHA1

    46581177ec3f584c33412dc9971697ebab653a65

  • SHA256

    dcb4c895d922f85a24bef9f605aacc4503ea7e68546ca10207ac8f2441bedb14

  • SHA512

    1a59bb98389ee1fe51309e09b39acf473af6004598c05c2e4e5b5c183259d1a115d5d96dd2b1126e603acdcaca0d5a4d66152509d5ec9f0b4dcc26b95c869c52

  • SSDEEP

    786432:hWNG30XdkVBTqUMx1S7kz6tlXVvCxZUXrfuF5hToducIvnm:cAPsQT8mzevoBUnm

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Rebina.zip
    .zip

    Password: ez

  • Rebina/FIX.exe
    .exe windows:4 windows x64 arch:x64

    Password: ez

    d439aad54e7fd85f5adafe6dba0c5d42


    Headers

    Imports

    Sections

  • Rebina/Rebina.exe
    .exe windows:4 windows x86 arch:x86

    Password: ez

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Rebina/borlndmm.dll
    .dll windows:5 windows x86 arch:x86

    Password: ez

    7028057a1895f8e9d0c743af27770b1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/cc32100mt.dll
    .dll windows:4 windows x86 arch:x86

    Password: ez

    8c6b03eae8fd279390ca970d47f5e142


    Headers

    Imports

    Exports

    Sections

  • Rebina/data/pua/extensions/VLSub.luac
  • Rebina/data/pua/http/css/main.css
  • Rebina/data/pua/http/css/mobile.css
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_diagonals-thick_18_b81900_40x40.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_diagonals-thick_20_666666_40x40.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_flat_10_000000_40x100.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_glass_100_f6f6f6_1x400.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_glass_100_fdf5ce_1x400.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_glass_65_ffffff_1x400.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_gloss-wave_35_f6a828_500x100.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_highlight-soft_100_eeeeee_1x100.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_highlight-soft_75_ffe45c_1x100.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_222222_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_228ef1_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_ef8c08_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_ffd27a_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_ffffff_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/jquery-ui-1.8.13.custom.css
  • Rebina/data/pua/http/custom.lua
    .js
  • Rebina/data/pua/http/dialogs/batch_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/browse_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/create_stream.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/equalizer_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/error_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/mosaic_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/offset_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/stream_config_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/stream_window.html
    .html .js polyglot
  • Rebina/data/pua/http/favicon.ico
  • Rebina/data/pua/http/images/Audio-48.png
    .png
  • Rebina/data/pua/http/images/Back-48.png
    .png
  • Rebina/data/pua/http/images/Folder-48.png
    .png
  • Rebina/data/pua/http/images/Other-48.png
    .png
  • Rebina/data/pua/http/images/Video-48.png
    .png
  • Rebina/data/pua/http/images/buttons.png
    .png
  • Rebina/data/pua/http/images/speaker-32.png
    .png
  • Rebina/data/pua/http/images/vlc-48.png
    .png
  • Rebina/data/pua/http/images/vlc16x16.png
    .png
  • Rebina/data/pua/http/index.html
    .html .js polyglot
  • Rebina/data/pua/http/js/common.js
    .js
  • Rebina/data/pua/http/js/controllers.js
    .js
  • Rebina/data/pua/http/js/jquery.jstree.js
    .js
  • Rebina/data/pua/http/js/ui.js
    .js
  • Rebina/data/pua/http/mobile.html
    .js
  • Rebina/data/pua/http/mobile_browse.html
    .js
  • Rebina/data/pua/http/mobile_equalizer.html
    .js
  • Rebina/data/pua/http/mobile_view.html
  • Rebina/data/pua/http/requests/README.txt
    .vbs
  • Rebina/data/pua/http/requests/browse.json
  • Rebina/data/pua/http/requests/browse.xml
    .xml
  • Rebina/data/pua/http/requests/playlist.json
  • Rebina/data/pua/http/requests/playlist.xml
    .js .xml polyglot
  • Rebina/data/pua/http/requests/playlist_jstree.xml
    .xml
  • Rebina/data/pua/http/requests/status.json
  • Rebina/data/pua/http/requests/status.xml
    .xml
  • Rebina/data/pua/http/requests/vlm.xml
    .xml
  • Rebina/data/pua/http/requests/vlm_cmd.xml
    .xml
  • Rebina/data/pua/http/view.html
    .js
  • Rebina/data/pua/http/vlm.html
    .html
  • Rebina/data/pua/http/vlm_export.html
  • Rebina/data/pua/intf/cli.luac
  • Rebina/data/pua/intf/dummy.luac
  • Rebina/data/pua/intf/dumpmeta.luac
  • Rebina/data/pua/intf/http.luac
  • Rebina/data/pua/intf/luac.luac
  • Rebina/data/pua/intf/modules/host.luac
  • Rebina/data/pua/intf/modules/httprequests.luac
  • Rebina/data/pua/intf/telnet.luac
  • Rebina/data/pua/meta/art/00_musicbrainz.luac
  • Rebina/data/pua/meta/art/01_googleimage.luac
  • Rebina/data/pua/meta/art/02_frenchtv.luac
  • Rebina/data/pua/meta/art/03_lastfm.luac
  • Rebina/data/pua/meta/reader/filename.luac
  • Rebina/data/pua/modules/common.luac
  • Rebina/data/pua/modules/dkjson.luac
  • Rebina/data/pua/modules/sandbox.luac
  • Rebina/data/pua/modules/simplexml.luac
  • Rebina/data/pua/playlist/anevia_streams.luac
  • Rebina/data/pua/playlist/anevia_xml.luac
  • Rebina/data/pua/playlist/appletrailers.luac
  • Rebina/data/pua/playlist/bbc_co_uk.luac
  • Rebina/data/pua/playlist/cue.luac
  • Rebina/data/pua/playlist/dailymotion.luac
  • Rebina/data/pua/playlist/jamendo.luac
  • Rebina/data/pua/playlist/koreus.luac
  • Rebina/data/pua/playlist/liveleak.luac
  • Rebina/data/pua/playlist/newgrounds.luac
  • Rebina/data/pua/playlist/rockbox_fm_presets.luac
  • Rebina/data/pua/playlist/soundcloud.luac
  • Rebina/data/pua/playlist/twitch.luac
  • Rebina/data/pua/playlist/vimeo.luac
  • Rebina/data/pua/playlist/vocaroo.luac
  • Rebina/data/pua/playlist/youtube.luac
    .js
  • Rebina/data/pua/sd/icecast.luac
  • Rebina/data/pua/sd/jamendo.luac
  • Rebina/dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ini/Custom.ini
  • Rebina/ini/DefaultScript.ini
  • Rebina/ini/FunctionDefine.ini
  • Rebina/ini/Inform.ini
  • Rebina/ini/Internet.ini
  • Rebina/ini/Main.ini
  • Rebina/ocx/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    fcc40667ac22e0c598518006de958259


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ocx/RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aaca01ab2cd35af160b8025e9dcfad9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ocx/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ocx/TabS.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Rebina/ocx/TabS.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Rebina/ocx/aero.skn
  • Rebina/ocx/mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/translations/qt_ca.qm
  • Rebina/translations/qt_cs.qm
  • Rebina/translations/qt_de.qm
  • Rebina/translations/qt_fi.qm
  • Rebina/translations/qt_fr.qm
  • Rebina/translations/qt_he.qm
  • Rebina/translations/qt_hu.qm
  • Rebina/translations/qt_it.qm
  • Rebina/translations/qt_ja.qm
  • Rebina/translations/qt_ko.qm
  • Rebina/translations/qt_lv.qm
  • Rebina/translations/qt_ru.qm
  • Rebina/translations/qt_sk.qm
  • Rebina/translations/qt_uk.qm