General

  • Target

    [new]FLASH.zip

  • Size

    4.9MB

  • MD5

    8a386d4404eb8c6d8e20342858799c3f

  • SHA1

    8e186af29f493b69355e591be42ef38cb739d5a5

  • SHA256

    354d63120c789e28fe5959a453ab0a95cbdb534a015ba570b98bf9cac7941d1d

  • SHA512

    ecec516cbe7037cd48aa052c1a913c196048b20f3d53e6882ddd96b2e48c78611f5fa69dcf2a5f7eb2def75f410beaf724b967b2e1287c66cc9840d353e5784b

  • SSDEEP

    98304:s0tW38+YVPtzkfQ+IGWLOUvACjzWX9Zkm4q5ANfTIuTb8ELTo6EWd9dX0:lt08P/zQLIGW6UvACjzWj55AJ8uf8ELw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • [new]FLASH.zip
    .zip

    Password: flash123

  • installed in/BIN/62/33/6233afb8e08943b8f9a0d7d1d17ee8e5
  • installed in/BIN/CHANGES.txt
  • installed in/BIN/ExtraActionBar.lua
  • installed in/BIN/MicroMenu.lua
  • installed in/BIN/PetButton.lua
  • installed in/BIN/Qt5QuickTemplates2.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    696b5d755fc1d4d7c337805bc8a638e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • installed in/BIN/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    ae15fc51ee87015af2fc029c06e0c950


    Headers

    Imports

    Exports

    Sections

  • installed in/BIN/qtANGLE.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    b665fdeb7f064fcf50f92683c0dec3da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • installed in/BIN/react-sortable-tree-original.scss
  • installed in/cjoc.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    5d628e86fd261109ecf91fbade3d7cb8


    Headers

    Imports

    Exports

    Sections

  • installed in/djua.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    42efb2ed3cf083af0935df9565521aa6


    Headers

    Imports

    Exports

    Sections

  • installed in/flashy_execute.exe
    .exe windows:4 windows x86 arch:x86

    Password: flash123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • installed in/lua51.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    4824cb5c122af83727114163f01add85


    Headers

    Imports

    Exports

    Sections

  • installed in/source/msdasql.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: flash123

    344fc2db6365ccc91b9e7255e5fb5656


    Headers

    Imports

    Exports

    Sections

  • installed in/source/sw.pak
  • installed in/source/ta.pak
  • installed in/source/te.pak
  • installed in/source/th.pak
  • installed in/sqlxmlx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    3392f24326d133e98f8f20b634ebbd87


    Headers

    Imports

    Exports

    Sections