General

  • Target

    🞵🞵LaTesT✿SeTuP❀pAsS🟉oPeN✿9192🞵🞵.zip

  • Size

    25.8MB

  • MD5

    e887c9eab85cf1774121f2168a99f08d

  • SHA1

    d60e9751b9a66e49b5a4844f02c573582baa4f30

  • SHA256

    ae01253adc9625dabe50fdecc3f99e4b271d432bf333deb27f9b27adf0adf627

  • SHA512

    b1c1b48403b11d329ec164191ca5b680e0cbcba45f0e1e3739618590bcdcd9c2c579969dc66e92e5b3655326182c26b07fff2d192d2b9951e53ab95aca8c89b4

  • SSDEEP

    786432:aDJkvkmA+Of6c9Yp4xUvKRq1wSKtI0ixf7h/N4s:6AOCpmUyY19K60Yf7h/qs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 🞵🞵LaTesT✿SeTuP❀pAsS🟉oPeN✿9192🞵🞵.zip
    .zip

    Password: 9192

  • 🞵🞵LaTesT✿SeTuP❀pAsS🟉oPeN✿9192🞵🞵/🞵🞵LaTesT✿SeTuP❀pAsS🟉oPeN✿9192🞵🞵.rar
    .rar

    Password: 9192

  • CrashRpt.dll
    .dll windows:4 windows x86 arch:x86

    Password: 9192

    6179dd39c9e298c5a1f23c87c77af143


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:4 windows x86 arch:x86

    Password: 9192

    c517da4ee82b7d23f5492e95c4148aa3


    Code Sign

    Headers

    Imports

    Sections

  • bfkwnfh
  • cv099.dll
    .dll windows:4 windows x86 arch:x86

    Password: 9192

    f8ba723005fd465fb74bbc6c90af3334


    Headers

    Imports

    Exports

    Sections

  • cxcore099.dll
    .dll windows:4 windows x86 arch:x86

    Password: 9192

    ced32ef681d252247a88c0ebcc6683b0


    Headers

    Imports

    Exports

    Sections

  • cximagecrt.dll
    .dll windows:4 windows x86 arch:x86

    Password: 9192

    d297c5c0c365fd2222bf4c79b7dcd228


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86

    Password: 9192

    bfdf63b29852e4529780d92b76de1d65


    Headers

    Imports

    Exports

    Sections

  • highgui099.dll
    .dll windows:4 windows x86 arch:x86

    Password: 9192

    6e2b344b9a3cbd1ab36765bf7cce7f58


    Headers

    Imports

    Exports

    Sections

  • kqaaklq
  • opengl64.dll
    .exe windows:6 windows x64 arch:x64

    12c058d908f07eb19d3f1f0a4bb41bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource_/CMap/Identity-H
  • resource_/CMap/Identity-V
  • resource_/CMap/UCS2-GBK-EUC
  • resource_/CMap/UniKS-UTF16-H
  • resource_/CMap/UniKS-UTF16-V
  • resource_/Font/AdobePIStd.otf
  • resource_/Font/CourierStd-Bold.otf
  • resource_/Font/CourierStd-BoldOblique.otf
  • resource_/Font/CourierStd-Oblique.otf
  • resource_/Font/CourierStd.otf
  • resource_/Font/MinionPro-Bold.otf
  • resource_/Font/MinionPro-BoldIt.otf
  • resource_/Font/MinionPro-It.otf
  • resource_/Font/MinionPro-Regular.otf
  • resource_/Font/MyriadPro-Bold.otf
  • resource_/Font/MyriadPro-BoldIt.otf
  • resource_/Font/MyriadPro-It.otf
  • resource_/Font/MyriadPro-Regular.otf
  • resource_/Font/Pfm/CMap/Identity-H
  • resource_/Font/Pfm/CMap/Identity-V
  • resource_/Font/Pfm/CMap/UCS2-GBK-EUC
  • resource_/Font/Pfm/CMap/UniKS-UTF16-H
  • resource_/Font/Pfm/CMap/UniKS-UTF16-V
  • resource_/Font/Pfm/Font/AdobePIStd.otf
  • resource_/Font/Pfm/Font/CourierStd-Bold.otf
  • resource_/Font/Pfm/Font/CourierStd-BoldOblique.otf
  • resource_/Font/Pfm/Font/CourierStd-Oblique.otf
  • resource_/Font/Pfm/Font/CourierStd.otf
  • resource_/Font/Pfm/Font/MinionPro-Bold.otf
  • resource_/Font/Pfm/Font/MinionPro-BoldIt.otf
  • resource_/Font/Pfm/Font/MinionPro-It.otf
  • resource_/Font/Pfm/Font/MinionPro-Regular.otf
  • resource_/Font/Pfm/Font/MyriadPro-Bold.otf
  • resource_/Font/Pfm/Font/MyriadPro-BoldIt.otf
  • resource_/Font/Pfm/Font/MyriadPro-It.otf
  • resource_/Font/Pfm/Font/MyriadPro-Regular.otf
  • resource_/Font/Pfm/Font/Pfm/SY______.PFM
  • resource_/Font/Pfm/Font/Pfm/zx______.pfm
  • resource_/Font/Pfm/Font/Pfm/zy______.pfm
  • resource_/Font/Pfm/Font/SY______.PFB
  • resource_/Font/Pfm/Font/ZX______.PFB
  • resource_/Font/Pfm/Font/ZY______.PFB
  • resource_/Font/Pfm/Locals/am.pak
  • resource_/Font/Pfm/Locals/ar.pak
  • resource_/Font/Pfm/Locals/fi.pak
  • resource_/Font/Pfm/Locals/fil.pak
  • resource_/Font/Pfm/Locals/fr.pak
  • resource_/Font/Pfm/Locals/gu.pak
  • resource_/Font/Pfm/Locals/he.pak
  • resource_/Font/Pfm/Locals/hi.pak
  • resource_/Font/Pfm/Locals/hr.pak
  • resource_/Font/Pfm/Locals/hu.pak
  • resource_/Font/Pfm/Locals/id.pak
  • resource_/Font/Pfm/Locals/lt.pak
  • resource_/Font/Pfm/Locals/lv.pak
  • resource_/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resource_/Font/Pfm/Locals/x64/AdonisUI.ClassicTheme.xml
    .xml
  • resource_/Font/Pfm/Locals/x64/AdonisUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resource_/Font/Pfm/Locals/x64/AdonisUI.xml
    .xml
  • resource_/Font/Pfm/Locals/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    a42f73521c784fa06f1d886fcbcefcba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource_/Font/Pfm/Locals/x86/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • resource_/Font/Pfm/Locals/x86/BouncyCastle.Crypto.xml
    .xml
  • resource_/Font/Pfm/Locals/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    39ace63b362beb47a2a7a8202a5c4f2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource_/Font/Pfm/SY______.PFM
  • resource_/Font/Pfm/SaslPrep/SaslPrepProfile_norm_bidi.spp
  • resource_/Font/Pfm/TypeSupport/Unicode/ICU/icudt26l.dat
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1250.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1251.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1252.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1253.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1254.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1257.TXT
  • resource_/Font/Pfm/TypeSupport/Unicode/Mappings/win/CP1258.TXT
  • resource_/Font/Pfm/opengl64.dll
  • resource_/Font/Pfm/resources.pak
  • resource_/Font/Pfm/zx______.pfm
  • resource_/Font/Pfm/zy______.pfm
  • resource_/Font/SY______.PFB
  • resource_/Font/ZX______.PFB
  • resource_/Font/ZY______.PFB
  • resource_/Register.dll
    .dll windows:5 windows x86 arch:x86

    ee94d9d14cff80538936ff9d276ecfc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource_/carferry.flv
  • resource_/resources.pak
  • resource_/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater/NvStWiz.prx
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • updater/manager/ks_tyres.ini
  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections