General

  • Target

    hanzowoofercracked.rar

  • Size

    44.1MB

  • MD5

    6970f018287f5cb0db5562480e525178

  • SHA1

    79c6ff278945820573bfef5206323ac4c09fc674

  • SHA256

    1dd88bd12922e9d756d52f66d8c1198ed8c7cf0477c35990f5ee738246c0ef0a

  • SHA512

    f540dc13fe094cd73eeabe05d13d2b85b98c44bc343bfa42a1b099bdbdf88b947eb3135f20735d04d2f9f0bdeab54ce2d6eb0375238c65245a60275c8a533bdb

  • SSDEEP

    786432:n/QFsFhAMuKMlRtBi6HUfmoQiXicyiQhN+waNKHQghfPIex8gsfUPdgEk7:n/3FyZlRqeJa16N+tKHZ9Pbu5fUPdgh7

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • hanzowoofercracked.rar
    .rar
  • hanzowoofercracked/hanzopermcracked.1337
  • hanzowoofercracked/hanzopermspoofer.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • x64/Beamer x64.exe
    .exe windows:5 windows x64 arch:x64

    661163ee5bfc34eb52e81688f60bae4f


    Code Sign

    Headers

    Imports

    Sections

  • x64/Beamer x64.ini
  • x64/DeviceNameResolver.dll
    .dll windows:5 windows x64 arch:x64

    a0ee1bb440001cd886da5d201dd6aaed


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/GleeBug/TitanEngine.dll
    .dll windows:5 windows x64 arch:x64

    3d218aed6e8c20b76af68aa58d507074


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/LLVMDemangle.dll
    .dll windows:5 windows x64 arch:x64

    93e8ccb10d16bc39ff7a0664d9f9b8f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    89e42e9bec63b1ede39028faad8bc8da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    431bbb76e7c1c08be19a288962c9d865


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c29611e784744137000712f403c879ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    b8fb0f9de1821be86d66512722e74fa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    f95c1d3728ee77b0823d248fb9250d56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Qt5WinExtras.dll
    .dll windows:6 windows x64 arch:x64

    77a3fd7b858955008f07aa06d73ef71f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Scylla.dll
    .dll windows:5 windows x64 arch:x64

    f6d89f01ac203c927ab09308d21a6a32


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/StaticEngine/TitanEngine.dll
    .dll windows:5 windows x64 arch:x64

    1007d76571ae032d71f6f8bc1ff7b2c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/TitanEngine.dll
    .dll windows:5 windows x64 arch:x64

    7abd52ec7c198fcb58f7bbc1ddfe0502


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/XEDParse.dll
    .dll windows:6 windows x64 arch:x64

    d5b6035413ef1965ddc6469a06935ac4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/asmjit.dll
    .dll windows:5 windows x64 arch:x64

    172e34a27d2940c62f8c460f1134c662


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/db/AridekVM.exe.dd64
  • x64/db/Bear_Loader.exe.dd64
  • x64/db/Client (2).exe.dd64
  • x64/db/DemonLite.exe.dd64
  • x64/db/Loader (9).exe.dd64
  • x64/db/OJZXwr3.exe.dd64
  • x64/db/Project Astro.exe.dd64
  • x64/db/StaffBesting Loader.exe.dd64
  • x64/db/VqManager_Root.exe.dd64
  • x64/db/WbappeV2.11 (1).exe.dd64
  • x64/db/aubtpkhtlp.exe.dd64
  • x64/db/crack.exe.dd64
  • x64/db/dwaefaefewfwdfqe.exe.dd64
  • x64/db/e33dskff0kcej.exe.dd64
  • x64/db/gpu_manger.exe.dd64
  • x64/db/loader.exe.dd64
  • x64/db/unpacked_gpu_manger.exe.dd64
  • x64/db/unpacked_loader.exe.dd64
  • x64/db/unpacked_yVY4y.exe.dd64
  • x64/db/yVY4y-cracked.exe.dd64
  • x64/db/yVY4y.exe.dd64
  • x64/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    1070d0a734a349d697cec96febe8448f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    30874efd591522944ad291448bc68777


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    0e16134644816a81b448ae10209d3b55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    d1d7ffbafbb4db0666b42d55788b5159


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    1d8b3b623e9bb80b11a33bbfc518793c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    ee2230a44ab648104b666165063f7e0d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    b39dc058b544d9e556587a5e697ddd4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    b8afc8585d723d9ab276ba73e1bd2546


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    ab2f864429f930ba88df7438cc4f117b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    f5dea7fb677575982aa2d2d1e9b72327


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    b365c4dcb0cf182c6bee36071a2b6ecc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/jansson.dll
    .dll windows:5 windows x64 arch:x64

    a260810dcedeea1b895d163295e60a56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/ldconvert.dll
    .dll windows:4 windows x64 arch:x64

    71a2b56185baacbb7c163b6dabe1b150


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/libeay32.dll
    .dll windows:4 windows x64 arch:x64

    c58d8c60fcd67ebf99c2b6a7061f8dbe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/loaddll.exe
    .exe windows:5 windows x64 arch:x64

    436cca4b1ec156c7845f9b34b253b7cc


    Code Sign

    Headers

    Imports

    Sections

  • x64/lz4.dll
    .dll windows:5 windows x64 arch:x64

    dfe2fecdbfb1cc41127a0ad863281a52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/msdia140.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a443c770827c4f26c2f12fcf24bd7ed8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    8bbb502b9452fee14bc96b306e6136bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    22c8d9aaec6efbde87d651ec6e738ef1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/HookLibraryx64.dll
    .dll windows:5 windows x64 arch:x64

    73b0a41dd52079dd6cc2d7796cae803b


    Headers

    Imports

    Exports

    Sections

  • x64/plugins/ScyllaHideX64DBGPlugin.dp64
    .dll windows:5 windows x64 arch:x64

    9638a64319541019383aa5554deddb67


    Headers

    Imports

    Exports

    Sections

  • x64/plugins/scylla_hide.ini
  • x64/plugins/scylla_hide.log
  • x64/ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    47ba88217ec90f23914b7f4616463268


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/wdadawd.ini
  • x64/x64_bridge.dll
    .dll windows:5 windows x64 arch:x64

    94482195a14b2f0ff3fd77f07609274d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/x64_dbg.dll
    .dll windows:5 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x64/x64bridge.dll
    .dll windows:5 windows x64 arch:x64

    b289c3c03d11d0f4084e9cd7c77ec32d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/x64dbg.dll
    .dll windows:5 windows x64 arch:x64

    fad52cdb41d5cfd145979a083b4f5e7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/x64dbg.ini
  • x64/x64gui.dll
    .dll windows:6 windows x64 arch:x64

    9a911bc112ef2e8b3cc8cd440bf41fce


    Code Sign

    Headers

    Imports

    Exports

    Sections