General

  • Target

    Rebina.zip

  • Size

    32.7MB

  • MD5

    a21338c6e5da6750e56f290169b8d422

  • SHA1

    70bf44de0eb8a6a2c3357511ccd2c27869092837

  • SHA256

    ff199b7fe5b86e9b18aca37dfbfbd0665e446cd6893115baa9ae8b90ef18d2a2

  • SHA512

    7980ee496f416efd76564b14fc982dd0d7310224528227d676d2a49db8858d3d974b6da7d60cb617d50643cbe187b420dc1ae0502d1451ab440bc186fd5aad4e

  • SSDEEP

    786432:qHhDLr7teamWz5OgzG03rOIUKKEyUxAH4zyHGJ:qdr7taWz/13r1YJOzyHq

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Rebina.zip
    .zip

    Password: ez

  • Rebina/FIX.exe
    .exe windows:4 windows x64 arch:x64

    Password: ez

    d439aad54e7fd85f5adafe6dba0c5d42


    Headers

    Imports

    Sections

  • Rebina/Rebina.exe
    .exe windows:4 windows x86 arch:x86

    Password: ez

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Rebina/borlndmm.dll
    .dll windows:5 windows x86 arch:x86

    Password: ez

    7028057a1895f8e9d0c743af27770b1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/cc32100mt.dll
    .dll windows:4 windows x86 arch:x86

    Password: ez

    8c6b03eae8fd279390ca970d47f5e142


    Headers

    Imports

    Exports

    Sections

  • Rebina/data/pua/extensions/VLSub.luac
  • Rebina/data/pua/http/css/main.css
  • Rebina/data/pua/http/css/mobile.css
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_diagonals-thick_18_b81900_40x40.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_diagonals-thick_20_666666_40x40.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_flat_10_000000_40x100.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_glass_100_f6f6f6_1x400.png
    .png

    Password: ez

  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_glass_100_fdf5ce_1x400.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_glass_65_ffffff_1x400.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_gloss-wave_35_f6a828_500x100.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_highlight-soft_100_eeeeee_1x100.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-bg_highlight-soft_75_ffe45c_1x100.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_222222_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_228ef1_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_ef8c08_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_ffd27a_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/images/ui-icons_ffffff_256x240.png
    .png
  • Rebina/data/pua/http/css/ui-lightness/jquery-ui-1.8.13.custom.css
  • Rebina/data/pua/http/custom.lua
    .js
  • Rebina/data/pua/http/dialogs/batch_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/browse_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/create_stream.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/equalizer_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/error_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/mosaic_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/offset_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/stream_config_window.html
    .html .js polyglot
  • Rebina/data/pua/http/dialogs/stream_window.html
    .html .js polyglot
  • Rebina/data/pua/http/favicon.ico
  • Rebina/data/pua/http/images/Audio-48.png
    .png
  • Rebina/data/pua/http/images/Back-48.png
    .png
  • Rebina/data/pua/http/images/Folder-48.png
    .png
  • Rebina/data/pua/http/images/Other-48.png
    .png
  • Rebina/data/pua/http/images/Video-48.png
    .png
  • Rebina/data/pua/http/images/buttons.png
    .png
  • Rebina/data/pua/http/images/speaker-32.png
    .png
  • Rebina/data/pua/http/images/vlc-48.png
    .png
  • Rebina/data/pua/http/images/vlc16x16.png
    .png
  • Rebina/data/pua/http/index.html
    .html .js polyglot
  • Rebina/data/pua/http/js/common.js
    .js
  • Rebina/data/pua/http/js/controllers.js
    .js
  • Rebina/data/pua/http/js/jquery.jstree.js
    .js
  • Rebina/data/pua/http/js/ui.js
    .js
  • Rebina/data/pua/http/mobile.html
    .js
  • Rebina/data/pua/http/mobile_browse.html
    .js
  • Rebina/data/pua/http/mobile_equalizer.html
    .js
  • Rebina/data/pua/http/mobile_view.html
  • Rebina/data/pua/http/requests/README.txt
    .vbs
  • Rebina/data/pua/http/requests/browse.json
  • Rebina/data/pua/http/requests/browse.xml
    .xml
  • Rebina/data/pua/http/requests/playlist.json
  • Rebina/data/pua/http/requests/playlist.xml
    .js .xml polyglot
  • Rebina/data/pua/http/requests/playlist_jstree.xml
    .xml
  • Rebina/data/pua/http/requests/status.json
  • Rebina/data/pua/http/requests/status.xml
    .xml
  • Rebina/data/pua/http/requests/vlm.xml
    .xml
  • Rebina/data/pua/http/requests/vlm_cmd.xml
    .xml
  • Rebina/data/pua/http/view.html
    .js
  • Rebina/data/pua/http/vlm.html
    .html
  • Rebina/data/pua/http/vlm_export.html
  • Rebina/data/pua/intf/cli.luac
  • Rebina/data/pua/intf/dummy.luac
  • Rebina/data/pua/intf/dumpmeta.luac
  • Rebina/data/pua/intf/http.luac
  • Rebina/data/pua/intf/luac.luac
  • Rebina/data/pua/intf/modules/host.luac
  • Rebina/data/pua/intf/modules/httprequests.luac
  • Rebina/data/pua/intf/telnet.luac
  • Rebina/data/pua/meta/art/00_musicbrainz.luac
  • Rebina/data/pua/meta/art/01_googleimage.luac
  • Rebina/data/pua/meta/art/02_frenchtv.luac
  • Rebina/data/pua/meta/art/03_lastfm.luac
  • Rebina/data/pua/meta/reader/filename.luac
  • Rebina/data/pua/modules/common.luac
  • Rebina/data/pua/modules/dkjson.luac
  • Rebina/data/pua/modules/sandbox.luac
  • Rebina/data/pua/modules/simplexml.luac
  • Rebina/data/pua/playlist/anevia_streams.luac
  • Rebina/data/pua/playlist/anevia_xml.luac
  • Rebina/data/pua/playlist/appletrailers.luac
  • Rebina/data/pua/playlist/bbc_co_uk.luac
  • Rebina/data/pua/playlist/cue.luac
  • Rebina/data/pua/playlist/dailymotion.luac
  • Rebina/data/pua/playlist/jamendo.luac
  • Rebina/data/pua/playlist/koreus.luac
  • Rebina/data/pua/playlist/liveleak.luac
  • Rebina/data/pua/playlist/newgrounds.luac
  • Rebina/data/pua/playlist/rockbox_fm_presets.luac
  • Rebina/data/pua/playlist/soundcloud.luac
  • Rebina/data/pua/playlist/twitch.luac
  • Rebina/data/pua/playlist/vimeo.luac
  • Rebina/data/pua/playlist/vocaroo.luac
  • Rebina/data/pua/playlist/youtube.luac
    .js
  • Rebina/data/pua/sd/icecast.luac
  • Rebina/data/pua/sd/jamendo.luac
  • Rebina/dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ini/Custom.ini
  • Rebina/ini/DefaultScript.ini
  • Rebina/ini/FunctionDefine.ini
  • Rebina/ini/Inform.ini
  • Rebina/ini/Internet.ini
  • Rebina/ini/Main.ini
  • Rebina/ocx/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    fcc40667ac22e0c598518006de958259


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ocx/RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aaca01ab2cd35af160b8025e9dcfad9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ocx/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/ocx/TabS.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Rebina/ocx/TabS.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Rebina/ocx/aero.skn
  • Rebina/ocx/mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rebina/translations/qt_ca.qm
  • Rebina/translations/qt_cs.qm
  • Rebina/translations/qt_de.qm
  • Rebina/translations/qt_fi.qm
  • Rebina/translations/qt_fr.qm
  • Rebina/translations/qt_he.qm
  • Rebina/translations/qt_hu.qm
  • Rebina/translations/qt_it.qm
  • Rebina/translations/qt_ja.qm
  • Rebina/translations/qt_ko.qm
  • Rebina/translations/qt_lv.qm
  • Rebina/translations/qt_ru.qm
  • Rebina/translations/qt_sk.qm
  • Rebina/translations/qt_uk.qm