General

  • Target

    #!Se-tUp_2244_Pa$$WorDsS (2244).zip

  • Size

    16.8MB

  • MD5

    e035c85d51ff76012564ecbaa725744d

  • SHA1

    5f95c46bc2a16f6632e031ec39198db3364468f2

  • SHA256

    72450a502c1a2a31b45e71091139350e296da626af458229f91f51ec9f635d0d

  • SHA512

    9c664db3bcab44af2a08fb3c6e6633cdd7cb813701b0f28924f8cde4e00b8bf0282a1c3d1f758890bd5a20a82ed02756a07f927453d144851b3ac055d2efb352

  • SSDEEP

    393216:LDbHXLxyqqjoepG9wXwLZKcjStctFsNE9U7KeEO1o:L9YQh2yFsii+VO1o

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • #!Se-tUp_2244_Pa$$WorDsS (2244).zip
    .zip

    Password: 2244

  • @Se-tUp_2244_Pa$$W0rdss!.rar
    .rar

    Password: 2244

  • PassCode.txt
  • Resource/CMap/Identity-H
  • Resource/CMap/Identity-V
  • Resource/CMap/UCS2-GBK-EUC
  • Resource/CMap/UniKS-UTF16-H
  • Resource/CMap/UniKS-UTF16-V
  • Resource/Font/AdobePIStd.otf
  • Resource/Font/CourierStd-Bold.otf
  • Resource/Font/CourierStd-BoldOblique.otf
  • Resource/Font/CourierStd-Oblique.otf
  • Resource/Font/CourierStd.otf
  • Resource/Font/MinionPro-Bold.otf
  • Resource/Font/MinionPro-BoldIt.otf
  • Resource/Font/MinionPro-It.otf
  • Resource/Font/MinionPro-Regular.otf
  • Resource/Font/MyriadPro-Bold.otf
  • Resource/Font/MyriadPro-BoldIt.otf
  • Resource/Font/MyriadPro-It.otf
  • Resource/Font/MyriadPro-Regular.otf
  • Resource/Font/Pfm/SY______.PFM
  • Resource/Font/Pfm/zx______.pfm
  • Resource/Font/Pfm/zy______.pfm
  • Resource/Font/SY______.PFB
  • Resource/Font/ZX______.PFB
  • Resource/Font/ZY______.PFB
  • Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • Resource/TypeSupport/Unicode/ICU/icudt26l.dat
  • Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2244

    559daf020120564bf0fa0be7a3fc7562


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ccme_ecc.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2244

    85fa29bd3c72ce2d14f3f8e4207261d4


    Headers

    Imports

    Exports

    Sections

  • icucnv67.dll
    .msi
  • icudt67.dll
    .msi
  • js3250.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2244

    d26fb3d1fdd03b5d33568e4032eabc66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mhid
  • mvte
  • nsldap32v50.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2244

    87101a3410828ef79d4665f3b9b2a066


    Headers

    Imports

    Exports

    Sections

  • nsldappr32v50.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2244

    f7c57cf262154d8406d63eb01a9831b4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nspr4.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2244

    0d1dbe8a8b79ffb8d9ab2ac783710770


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nss3.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2244

    52d58e963e38dcb067abc227b11d7786


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plc4.dll
    .dll windows:4 windows x86 arch:x86

    989b593a3d75d9f5e83b07aa5a06e756


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plds4.dll
    .dll windows:4 windows x86 arch:x86

    493a355bf75993c87a066d12140985ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources.pak
  • smime3.dll
    .dll windows:4 windows x86 arch:x86

    daa86d1c9118eb0927e132287344524d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • softokn3.dll
    .dll windows:4 windows x86 arch:x86

    d52dccf7e4e61447eff37ac265376d38


    Headers

    Imports

    Exports

    Sections

  • ssl3.dll
    .dll windows:4 windows x86 arch:x86

    a16697b1daf948bb995d054e0d7c137e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcomp140.dll
    .dll windows:6 windows x64 arch:x64

    b0dceb96b51d2648c4e665c9ec09b163


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/ACE.dll
    .dll windows:6 windows x86 arch:x86

    23076d501d734740bd988395f9a2bdc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AGM.dll
    .dll windows:6 windows x86 arch:x86

    0c4ef399e3ebaa650bb9619d8524550c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AIDE.dll
    .dll windows:6 windows x86 arch:x86

    35310b00e41c70ccb762d39f144b9fc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/Acrobat/Acrobat32OL.dll
    .dll windows:6 windows x86 arch:x86

    6062013b3a9e7db7d8413ae1dcbbdd2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/Acrobat/Adobe.Acrobat.Dependencies.manifest
    .xml
  • x86/Acrobat/Onix32.dll
    .dll windows:6 windows x86 arch:x86

    daaa110d62c7d69cff88f74569703386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/AdobeXMP.dll
    .dll windows:6 windows x86 arch:x86

    6af9b18d0fde4654e8b2a5c75a9563ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/BIB.dll
    .dll windows:6 windows x86 arch:x86

    1d0257e1aac91706ba5a3464d653bbcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/BIBUtils.dll
    .dll windows:6 windows x86 arch:x86

    6ec1b6b05b219bb02c165a7efc6c6592


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/CoolType.dll
    .dll windows:6 windows x86 arch:x86

    4802bc9f23feb1a2452c8519e072c9db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/JP2KLib.dll
    .dll windows:6 windows x86 arch:x86

    83b05223f39b8593905fca1ffc7a2eba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xpcom_compat.dll
    .dll windows:4 windows x86 arch:x86

    998f216b6e49ae60b1a3ab0e87b6ed77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xpcom_core.dll
    .dll windows:4 windows x86 arch:x86

    72c4a56bef59c69549ff7980b33bc45b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Key.png
    .png
  • PassCode.txt