General

  • Target

    84af6da5dda3d5b08c600f5f29566d62ec4d06e45a9aea4eca29a2d66b0acc91

  • Size

    38.7MB

  • MD5

    e4dfcaa77516efd3b5a9c1cacd4c6e85

  • SHA1

    a5e94d20fb88845fa3eec8b71852ec21fdb56f1b

  • SHA256

    84af6da5dda3d5b08c600f5f29566d62ec4d06e45a9aea4eca29a2d66b0acc91

  • SHA512

    3fe443c59cd1e7feabebc35b9afb11b38841e6ca30c2e95ac5a4a6b2427a8c27d1b8230e4e385e950aff1050aa3dcf62bb762a39226e89bdd93a01f499b4ed76

  • SSDEEP

    786432:O0oC9my+gCXUxeEnw9laR9w+q9fYRTo2gNPPClDbkK68lhjHDT0//JXhLgTSGsfM:gCD+8xeEIY9wPVKlDbk0jjT0nJXlVX7o

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 84af6da5dda3d5b08c600f5f29566d62ec4d06e45a9aea4eca29a2d66b0acc91
    .zip
  • AbRoot.dll
    .dll windows:6 windows x64 arch:x64

    4a5f3c3aa39a4e0497dff0471239d5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AdTree.dll
    .dll windows:6 windows x64 arch:x64

    4a5f3c3aa39a4e0497dff0471239d5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    94edee571d3a6c3103264e81c1452c8a


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    665a7203ee328c8774e946b947bd499e


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    51d391f74bdd44264db9d63f1a545d8d


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    fd3bdea7e60f42da632f9afe3b5b5362


    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:5 windows x86 arch:x86

    3268f03d60f188163054c3ae889a8722


    Code Sign

    Headers

    Imports

    Sections

  • StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    911e3fa61860fcf3bb18b8468834b627


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opengl64.dll
    .exe windows:6 windows x64 arch:x64

    12c058d908f07eb19d3f1f0a4bb41bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ufq
  • updater/manager/ks_tyres.ini
  • updater/nvdisps.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    dfbc2610ae891add5adee324a4d9ad92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater/nvdispsr.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • updater/nvptxJitCompiler32.dll
    .dll windows:6 windows x86 arch:x86

    a21080ac288fcf24521518c1d5302242


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • yea