General

  • Target

    possibly malware.7z

  • Size

    28.0MB

  • MD5

    ced0765a53acb29e4c0bd42735a63f84

  • SHA1

    b51560ce3b08f0786f6db81f205433b70e76e612

  • SHA256

    256df56d3a1f3b8a4e375071d27e9edd30f48de2e1a59d8ae08919172b205236

  • SHA512

    588bdf34af71ce6096b9de006d938de19d53c9fa4fa77888a686991105942732c0f79bcbd534253a26e7f479e3137e71e55216ef5558122245155e88d80ff8e5

  • SSDEEP

    786432:PhpCDVobjLnGaPoP4MSwxWwvHMku96taZy4GI:ZYB6nOgMxx/S6klGI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • possibly malware.7z
    .7z
  • possibly malware/7z.exe.malware
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 7-zip.chm
    .chm
  • 7-zip.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c7649c311c13fd8bdd0d3d79b974e730


    Headers

    Imports

    Exports

    Sections

  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    9e0f76f3ceac4410c894961f44ab2b78


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    6ff17e15b4dd569b039973ccf414da18


    Headers

    Imports

    Sections

  • 7z.sfx
    .exe windows:4 windows x86 arch:x86

    26fbf291a240b90efae516aa59675d40


    Headers

    Imports

    Sections

  • 7zCon.sfx
    .exe windows:4 windows x86 arch:x86

    be41dda43b3125c88e27c41d5512c51f


    Headers

    Imports

    Sections

  • 7zFM.exe
    .exe windows:4 windows x86 arch:x86

    8c13a96ea66ea1be4a89dd582d4bd049


    Headers

    Imports

    Sections

  • 7zG.exe
    .exe windows:4 windows x86 arch:x86

    63aa45cc12799ae3168d7fcb556045d7


    Headers

    Imports

    Sections

  • 7zip_pad.xml
    .xml
  • History.txt
  • Lang/af.txt
  • Lang/ar.txt
  • Lang/ast.txt
  • Lang/az.txt
  • Lang/ba.txt
  • Lang/be.txt
  • Lang/bg.txt
  • Lang/bn.txt
  • Lang/br.txt
  • Lang/ca.txt
  • Lang/cs.txt
  • Lang/cy.txt
  • Lang/da.txt
  • Lang/de.txt
  • Lang/el.txt
  • Lang/en.ttt
  • Lang/eo.txt
  • Lang/es.txt
  • Lang/et.txt
  • Lang/eu.txt
  • Lang/ext.txt
  • Lang/fa.txt
  • Lang/fi.txt
  • Lang/fr.txt
  • Lang/fur.txt
  • Lang/fy.txt
  • Lang/gl.txt
  • Lang/he.txt
  • Lang/hr.txt
  • Lang/hu.txt
  • Lang/hy.txt
  • Lang/id.txt
  • Lang/io.txt
  • Lang/is.txt
  • Lang/it.txt
  • Lang/ja.txt
  • Lang/ka.txt
  • Lang/ko.txt
  • Lang/ku-ckb.txt
  • Lang/ku.txt
  • Lang/lt.txt
  • Lang/lv.txt
  • Lang/mk.txt
  • Lang/mn.txt
  • Lang/mr.txt
  • Lang/ms.txt
  • Lang/nb.txt
  • Lang/ne.txt
  • Lang/nl.txt
  • Lang/nn.txt
  • Lang/pa-in.txt
  • Lang/pl.txt
  • Lang/ps.txt
  • Lang/pt-br.txt
  • Lang/pt.txt
  • Lang/ro.txt
  • Lang/ru.txt
  • Lang/si.txt
  • Lang/sk.txt
  • Lang/sl.txt
  • Lang/sq.txt
  • Lang/sr-spc.txt
  • Lang/sr-spl.txt
  • Lang/sv.txt
  • Lang/ta.txt
  • Lang/th.txt
  • Lang/tr.txt
  • Lang/tt.txt
  • Lang/uk.txt
  • Lang/uz.txt
  • Lang/va.txt
  • Lang/vi.txt
  • Lang/zh-cn.txt
  • Lang/zh-tw.txt
  • License.txt
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • copying.txt
  • descript.ion
  • readme.txt
  • possibly malware/AIMP2.exe.malware
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • possibly malware/DTools.exe.malware
  • possibly malware/FoxitReader.exe.malware
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • possibly malware/Rar.exe.malware
    .exe windows:4 windows x86 arch:x86

    32830753410fe7cd5aac9d37c9f93023


    Headers

    Imports

    Exports

    Sections

  • possibly malware/RarExtLoader.exe.malware
    .exe windows:4 windows x86 arch:x86

    b6299745e7f090bc57c9d2b1c22f9e6a


    Headers

    Imports

    Exports

    Sections

  • possibly malware/UnRAR.exe.malware
    .exe windows:4 windows x86 arch:x86

    34bca7bc66fde67d5456937fcff90dfa


    Headers

    Imports

    Exports

    Sections

  • possibly malware/Uninstall.exe.malware
    .exe windows:4 windows x86 arch:x86

    c61d8c850719ddcd92aa317807aae655


    Headers

    Imports

    Exports

    Sections

  • possibly malware/WinRAR.exe.malware
    .exe windows:4 windows x86 arch:x86

    ff7fe1c736b9a63f20ec2682d58041a9


    Headers

    Imports

    Sections

  • possibly malware/klmcp.exe.malware
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections