General

  • Target

    0penSatUp.zip

  • Size

    16.0MB

  • MD5

    5dfa73442220fb08ca090126ed8ad28c

  • SHA1

    bee7e7852ea20a3ef682cb9ef94a3ab8af311c24

  • SHA256

    2f1617e3aa146d506e3da04fa005e960944e22b7b12c9cdb6dbb0bf228532e43

  • SHA512

    5fb37c7df01cc05d29ae26ffb7a9bafc3c655789bb0ca8b33129a207f08af31b3ec112056138d2cfc257a3f1e8fe3e8b34bdd628595b00f7c68009988a8899e3

  • SSDEEP

    393216:tBMzcWt7M7ADjCsyLeq1qVmIdez9tmLxYb1CHBuUPd1LdvA0YXxk:tBTq7MirVdmMUKd1hvA0YXxk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 0penSatUp.zip
    .zip
  • CrashRpt.dll
    .dll windows:4 windows x86 arch:x86

    6179dd39c9e298c5a1f23c87c77af143


    Headers

    Imports

    Exports

    Sections

  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • Set-up.exe
    .exe windows:4 windows x86 arch:x86

    c517da4ee82b7d23f5492e95c4148aa3


    Code Sign

    Headers

    Imports

    Sections

  • Set-up/.data
  • Set-up/.rdata
  • Set-up/.rsrc/1033/ACCELERATOR/101
  • Set-up/.rsrc/1033/DIALOG/100
  • Set-up/.rsrc/1033/DIALOG/102
  • Set-up/.rsrc/1033/DIALOG/104
  • Set-up/.rsrc/1033/DIALOG/106
  • Set-up/.rsrc/1033/DIALOG/108
  • Set-up/.rsrc/1033/DIALOG/109
  • Set-up/.rsrc/1033/DIALOG/110
  • Set-up/.rsrc/1033/DIALOG/115
  • Set-up/.rsrc/1033/DIALOG/117
  • Set-up/.rsrc/1033/DIALOG/118
  • Set-up/.rsrc/1033/DIALOG/119
  • Set-up/.rsrc/1033/DIALOG/120
  • Set-up/.rsrc/1033/DIALOG/122
  • Set-up/.rsrc/1033/DIALOG/123
  • Set-up/.rsrc/1033/DIALOG/124
  • Set-up/.rsrc/1033/DIALOG/125
  • Set-up/.rsrc/1033/DIALOG/126
  • Set-up/.rsrc/1033/DIALOG/127
  • Set-up/.rsrc/1033/DIALOG/129
  • Set-up/.rsrc/1033/DIALOG/130
  • Set-up/.rsrc/1033/DIALOG/131
  • Set-up/.rsrc/1033/DIALOG/133
  • Set-up/.rsrc/1033/DIALOG/134
  • Set-up/.rsrc/1033/DIALOG/136
  • Set-up/.rsrc/1033/DIALOG/137
  • Set-up/.rsrc/1033/DIALOG/138
  • Set-up/.rsrc/1033/DIALOG/140
  • Set-up/.rsrc/1033/GROUP_ICON/101
  • Set-up/.rsrc/1033/GROUP_ICON/111
  • Set-up/.rsrc/1033/GROUP_ICON/113
  • Set-up/.rsrc/1033/GROUP_ICON/135
  • Set-up/.rsrc/1033/ICON/1.ico
  • Set-up/.rsrc/1033/ICON/10.ico
  • Set-up/.rsrc/1033/ICON/11.ico
  • Set-up/.rsrc/1033/ICON/12.ico
  • Set-up/.rsrc/1033/ICON/13.ico
  • Set-up/.rsrc/1033/ICON/2.ico
  • Set-up/.rsrc/1033/ICON/3.ico
  • Set-up/.rsrc/1033/ICON/4.ico
  • Set-up/.rsrc/1033/ICON/5.ico
  • Set-up/.rsrc/1033/ICON/6.ico
  • Set-up/.rsrc/1033/ICON/7.ico
  • Set-up/.rsrc/1033/ICON/8.ico
  • Set-up/.rsrc/1033/ICON/9.ico
  • Set-up/.rsrc/1033/MANIFEST/1
  • Set-up/.rsrc/1033/MENU/103
  • Set-up/.rsrc/1033/version.txt
  • Set-up/.rsrc/2057/DIALOG/128
  • Set-up/.rsrc_1
  • Set-up/.text
  • Set-up/CERTIFICATE
  • cv099.dll
    .dll windows:4 windows x86 arch:x86

    f8ba723005fd465fb74bbc6c90af3334


    Headers

    Imports

    Exports

    Sections

  • cxcore099.dll
    .dll windows:4 windows x86 arch:x86

    ced32ef681d252247a88c0ebcc6683b0


    Headers

    Imports

    Exports

    Sections

  • cximagecrt.dll
    .dll windows:4 windows x86 arch:x86

    d297c5c0c365fd2222bf4c79b7dcd228


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86

    bfdf63b29852e4529780d92b76de1d65


    Headers

    Imports

    Exports

    Sections

  • highgui099.dll
    .dll windows:4 windows x86 arch:x86

    6e2b344b9a3cbd1ab36765bf7cce7f58


    Headers

    Imports

    Exports

    Sections

  • nqsxtfi
  • resources.pak
  • wgxyj
  • x86/ACE.dll
    .dll windows:6 windows x86 arch:x86

    23076d501d734740bd988395f9a2bdc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AGM.dll
    .dll windows:6 windows x86 arch:x86

    0c4ef399e3ebaa650bb9619d8524550c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AIDE.dll
    .dll windows:6 windows x86 arch:x86

    35310b00e41c70ccb762d39f144b9fc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/Acrobat/Acrobat32OL.dll
    .dll windows:6 windows x86 arch:x86

    6062013b3a9e7db7d8413ae1dcbbdd2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/Acrobat/Adobe.Acrobat.Dependencies.manifest
    .xml
  • x86/Acrobat/Onix32.dll
    .dll windows:6 windows x86 arch:x86

    daaa110d62c7d69cff88f74569703386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AdobeXMP.dll
    .dll windows:6 windows x86 arch:x86

    6af9b18d0fde4654e8b2a5c75a9563ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/BIB.dll
    .dll windows:6 windows x86 arch:x86

    1d0257e1aac91706ba5a3464d653bbcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/BIBUtils.dll
    .dll windows:6 windows x86 arch:x86

    6ec1b6b05b219bb02c165a7efc6c6592


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/CoolType.dll
    .dll windows:6 windows x86 arch:x86

    4802bc9f23feb1a2452c8519e072c9db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/JP2KLib.dll
    .dll windows:6 windows x86 arch:x86

    83b05223f39b8593905fca1ffc7a2eba


    Code Sign

    Headers

    Imports

    Exports

    Sections