Resubmissions

04/10/2024, 00:23

241004-apylesvblk 7

04/10/2024, 00:16

241004-aklq3axhle 7

General

  • Target

    Debug.rar

  • Size

    127.9MB

  • MD5

    2967ead22bf48222eda4e4102d2ffd34

  • SHA1

    eb77a2bc7dacafae40b857b0d89666edea53db4a

  • SHA256

    fabf4e213961804e4c90aa74a1ae771bfcdff15810c7b5eb1ac849bbe6afcd85

  • SHA512

    02a5fd8d7a4daa35932a8db9555563cd5a62fe11fb6e8679921873f3955bad133c05cafd8fa14cf31737954f181705704be41cd1add7527886272a9b07ab199d

  • SSDEEP

    3145728:mHac5MFIthUdp27avnJHUahBcPVyMV7WSg9hnK:QacPU72YxVBMoSgPnK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • Debug.rar
    .rar
  • CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    f65a68f4cdfb0980cc425f64656560c0


    Headers

    Imports

    Exports

    Sections

  • CefSharp.BrowserSubprocess.Core.pdb
  • CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • CefSharp.BrowserSubprocess.pdb
  • CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    ffc0160d9a4a718c07879ae0c63f08b9


    Headers

    Imports

    Exports

    Sections

  • CefSharp.Core.Runtime.pdb
  • CefSharp.Core.Runtime.xml
    .js .xml polyglot
  • CefSharp.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.Core.pdb
  • CefSharp.Core.xml
    .js .xml polyglot
  • CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.Wpf.pdb
  • CefSharp.Wpf.xml
    .js .xml polyglot
  • CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CefSharp.pdb
  • CefSharp.xml
    .xml
  • Celery.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Celery.exe.config
  • Celery.pdb
  • Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Bcl.AsyncInterfaces.xml
    .xml
  • Microsoft.Expression.Interactions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.Expression.Interactions.xml
    .xml
  • Microsoft.Extensions.DependencyInjection.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.DependencyInjection.Abstractions.xml
    .xml
  • Microsoft.Extensions.DependencyInjection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.DependencyInjection.xml
    .xml
  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Newtonsoft.Json.xml
    .xml
  • System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Runtime.CompilerServices.Unsafe.xml
  • System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Threading.Tasks.Extensions.xml
  • System.Windows.Interactivity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Windows.Interactivity.xml
    .xml
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    102416632d8fb8249793faa959295bbe


    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:10 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:10 windows x64 arch:x64

    787e67fda97a478e5d761e8d1c62802a


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
    .ps1
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    67082af88118249115fd5249e678e93a


    Headers

    Imports

    Exports

    Sections