General

  • Target

    [V2] flashy exe.zip

  • Size

    4.9MB

  • MD5

    4a0516f321b41cbc8085e8a3f4317319

  • SHA1

    80247fd39f7a54e70c48d12b617a1e55f2acbdba

  • SHA256

    64fd7d96bb2c8755d617addf8196ab7665a92b749e8779632eebef17ec6051d1

  • SHA512

    0a5df8435af4dbf054c40baa5d1cd496dd832fe190af263d3be278b0a6b575ad051066954da1f120fec45a827a78987f27dcc7c2c9616070eca6b64eee95263a

  • SSDEEP

    98304:w0tW38+YVPtZKfQgIGCLOUvACxzWX9hkm4q5ANf9IuTD8ELTo6EWdjCc2Jd:5t08P/Z6/IGC6UvACxzW/55AJmu/8ELQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • [V2] flashy exe.zip
    .zip

    Password: flash123

  • run_exe/BIN/62/33/6233afb8e08943b8f9a0d7d1d17ee8e5
  • run_exe/BIN/CHANGES.txt
  • run_exe/BIN/ExtraActionBar.lua
  • run_exe/BIN/MicroMenu.lua
  • run_exe/BIN/PetButton.lua
  • run_exe/BIN/Qt5QuickTemplates2.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    696b5d755fc1d4d7c337805bc8a638e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • run_exe/BIN/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    Password: flash123

    ae15fc51ee87015af2fc029c06e0c950


    Headers

    Imports

    Exports

    Sections

  • run_exe/BIN/qtANGLE.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    b665fdeb7f064fcf50f92683c0dec3da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • run_exe/BIN/react-sortable-tree-original.scss
  • run_exe/by_execute.exe
    .exe windows:4 windows x86 arch:x86

    Password: flash123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • run_exe/cjoc.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    5d628e86fd261109ecf91fbade3d7cb8


    Headers

    Imports

    Exports

    Sections

  • run_exe/djua.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    42efb2ed3cf083af0935df9565521aa6


    Headers

    Imports

    Exports

    Sections

  • run_exe/lua51.dll
    .dll windows:6 windows x64 arch:x64

    Password: flash123

    4824cb5c122af83727114163f01add85


    Headers

    Imports

    Exports

    Sections

  • run_exe/source/msdasql.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: flash123

    344fc2db6365ccc91b9e7255e5fb5656


    Headers

    Imports

    Exports

    Sections

  • run_exe/source/sw.pak
  • run_exe/source/ta.pak
  • run_exe/source/te.pak
  • run_exe/source/th.pak
  • run_exe/sqlxmlx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    3392f24326d133e98f8f20b634ebbd87


    Headers

    Imports

    Exports

    Sections