General

  • Target

    867537f1e2f91e74c68eaf029f21479b.bin

  • Size

    33.0MB

  • MD5

    837e19148a25fe7fd49f8b29bd7549cc

  • SHA1

    3cca8d13420a315021cb0b411d2ddb04f92a1e81

  • SHA256

    cdf7704604f602522cabff38f75509469d80e53cd8f9a716d1c4faa02bd36851

  • SHA512

    ca88c31b5367563198105995073441fced5e76d36b2db9c599f4a01f6797696b5f24e473949109f0b63ca5f9d95d557322e2f3695b2ce4ff0f331a8ef56ac412

  • SSDEEP

    393216:0MwYrasdfrfrcK9lLma+ZICF0EtLBXNUhSu7v/1gowwGUTrz2H9FWjvq1925S6UQ:0cdf7VqftVXabH1gJyv27Hg/UYyNTLg5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 867537f1e2f91e74c68eaf029f21479b.bin
    .zip

    Password: infected

  • 085e482a89918e76a91aa3e17db7ac5046b346d2477791cbf846a5367906791b.zip
    .zip

    Password: infected

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    2530442c15bdf5e880f3e86bd015d2bf


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    e8f6984829b11831577c4d66dfedf94f


    Code Sign

    Headers

    Imports

    Sections

  • config.prx
    .exe windows:5 windows x86 arch:x86

    Password: infected

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • gcrv
  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    eb9cfc22836094167bd699fc0a51bab6


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    74f51c2177062ab2752fc871ebf0d685


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opengl64.dll
    .exe windows:6 windows x64 arch:x64

    12c058d908f07eb19d3f1f0a4bb41bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sbiupg
  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater/NvStWiz.prx
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • updater/manager/ks_tyres.ini
  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/Register.dll
    .dll windows:5 windows x86 arch:x86

    ee94d9d14cff80538936ff9d276ecfc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/carferry.flv
  • x64/glioma.asp
  • x64/libvlc.dll
    .dll windows:4 windows x86 arch:x86

    5c455bebc40d8ab001d42875154b8ef8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/libvlccore.dll
    .dll windows:4 windows x86 arch:x86

    f11716690dc3b1ac312b344caaf28102


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/CryptoPP530Fips32.dll
    .dll windows:4 windows x86 arch:x86

    d6c38e965367a686e74b0b12a0cf6e1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/CryptoPP530Fips64.dll
    .dll windows:4 windows x64 arch:x64

    47c7d73bcbd956569415ba59e9f3031d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/FlowSshC32.dll
    .dll windows:5 windows x86 arch:x86

    84d46400eaae645a88dad66ce90b9fb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/FlowSshC64.dll
    .dll windows:5 windows x64 arch:x64

    ee2e6d48ce061568a99f225d07587a30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/Microsoft.VisualStudio.VsWebProtocol
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • x64/plugins/NvStWiz
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • x64/plugins/StartupHelper
    .exe windows:5 windows x86 arch:x86

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • x64/plugins/cache/ICQLiteShell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    36da04e9d80185202c5dff27d69487ef


    Headers

    Imports

    Exports

    Sections

  • x64/plugins/cache/ICQRT.dll
    .dll windows:4 windows x86 arch:x86

    eea1a54f9a41b7445dc95356daf71d0a


    Headers

    Imports

    Exports

    Sections

  • x64/plugins/cache/Language/LiteRes.dll
    .dll windows:4 windows x86 arch:x86

    ce6ef31899b31809ae0c71c094c6f083


    Headers

    Imports

    Sections

  • x64/plugins/cache/Language/LiteSkinUtils.dll
    .dll windows:4 windows x86 arch:x86

    a8d043bdfc629c21151b760b23d3bcd9


    Headers

    Imports

    Exports

    Sections

  • x64/plugins/cache/Language/WinRar.exe
    .exe windows:5 windows x64 arch:x64

    629fae0a56e3262e208711dda6ae6b1d


    Code Sign

    Headers

    Imports

    Sections

  • x64/plugins/cache/Language/an.txt
  • x64/plugins/cache/Language/ar.txt
  • x64/plugins/cache/Language/az.txt
  • x64/plugins/cache/Language/ba.txt
  • x64/plugins/cache/Language/be.txt
  • x64/plugins/cache/Language/bg.txt
  • x64/plugins/cache/Language/bn.txt
  • x64/plugins/cache/Language/ca.txt
  • x64/plugins/cache/Language/co.txt
  • x64/plugins/cache/Language/cs.txt
  • x64/plugins/cache/Language/da.txt
  • x64/plugins/cache/Language/de.txt
  • x64/plugins/cache/Language/el.txt
  • x64/plugins/cache/Language/eng.txt
  • x64/plugins/cache/Language/es.txt
  • x64/plugins/cache/Language/et.txt
  • x64/plugins/cache/Language/eu.txt
  • x64/plugins/cache/Language/ext.txt
  • x64/plugins/cache/Language/fa.txt
  • x64/plugins/cache/Language/fi.txt
  • x64/plugins/cache/Language/fr.txt
  • x64/plugins/cache/Language/fur.txt
  • x64/plugins/cache/Language/fy.txt
  • x64/plugins/cache/Language/ga.txt
  • x64/plugins/cache/Language/gl.txt
  • x64/plugins/cache/Language/gu.txt
  • x64/plugins/cache/Language/he.pak
  • x64/plugins/cache/Language/he.txt
  • x64/plugins/cache/Language/hi.pak
  • x64/plugins/cache/Language/hi.txt
  • x64/plugins/cache/Language/hr.pak
  • x64/plugins/cache/Language/hr.txt
  • x64/plugins/cache/Language/hu.pak
  • x64/plugins/cache/Language/hu.txt
  • x64/plugins/cache/Language/hy.txt
  • x64/plugins/cache/Language/id.txt
  • x64/plugins/cache/Language/is.txt
  • x64/plugins/cache/Language/it.txt
  • x64/plugins/cache/Language/ja.txt
  • x64/plugins/cache/Language/ka.txt
  • x64/plugins/cache/Language/kaa.txt
  • x64/plugins/cache/Language/kab.txt
  • x64/plugins/cache/Language/kk.txt
  • x64/plugins/cache/Language/ko.txt
  • x64/plugins/cache/Language/ku-ckb.txt
  • x64/plugins/cache/Language/ky.txt
  • x64/plugins/cache/Language/lij.txt
  • x64/plugins/cache/Language/lt.txt
  • x64/plugins/cache/Language/madHcNet32.dll
    .dll windows:5 windows x86 arch:x86

    1e157842e5cd99d6e1fd082c5f35c9fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/cache/Language/mk.txt
  • x64/plugins/cache/Language/mn.txt
  • x64/plugins/cache/Language/mng.txt
  • x64/plugins/cache/Language/mng2.txt
  • x64/plugins/cache/Language/mr.txt
  • x64/plugins/cache/Language/mvrSettings32.dll
    .dll windows:5 windows x86 arch:x86

    e143d001bea94d24e61013ddbd97bbf0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/cache/Language/ne.txt
  • x64/plugins/cache/Language/nl.txt
  • x64/plugins/cache/Language/nolimetangere.pkg
  • x64/plugins/cache/Language/pa-in.txt
  • x64/plugins/cache/Language/pl.txt
  • x64/plugins/cache/Language/ps.txt
  • x64/plugins/cache/Language/pt-br.txt
  • x64/plugins/cache/Language/pt.txt
  • x64/plugins/cache/Language/ro.txt
  • x64/plugins/cache/Language/ru.txt
  • x64/plugins/cache/Language/sa.txt
  • x64/plugins/cache/Language/si.txt
  • x64/plugins/cache/Language/sk.txt
  • x64/plugins/cache/Language/sl.txt
  • x64/plugins/cache/Language/sr-spc.txt
  • x64/plugins/cache/Language/sr-spl.txt
  • x64/plugins/cache/Language/sv.txt
  • x64/plugins/cache/Language/sw.txt
  • x64/plugins/cache/Language/ta.txt
  • x64/plugins/cache/Language/tg.txt
  • x64/plugins/cache/Language/th.txt
  • x64/plugins/cache/Language/tk.txt
  • x64/plugins/cache/Language/tr.txt
  • x64/plugins/cache/Language/tt.txt
  • x64/plugins/cache/Language/ug.txt
  • x64/plugins/cache/Language/uk.txt
  • x64/plugins/cache/Language/unrar.dll
    .dll windows:5 windows x86 arch:x86

    97687a07538d3932fb9baf861b959f5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/plugins/cache/Language/uz-cyrl.txt
  • x64/plugins/cache/Language/uz.txt
  • x64/plugins/cache/Language/va.txt
  • x64/plugins/cache/Language/vi.txt
  • x64/plugins/cache/Language/yo.txt
  • x64/plugins/cache/Language/zh-cn.txt
  • x64/plugins/cache/Language/zh-tw.txt
  • x64/plugins/cache/acceptancy.svg
  • x64/plugins/cache/opengl64
  • x64/plugins/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • x64/plugins/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • x64/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections