General

  • Target

    4324432c547b9d272033e7b4483b0bb3.bin

  • Size

    38.1MB

  • MD5

    5afd3281df0c2257d43e0b450a6420ae

  • SHA1

    15221ceeceddbda2d0ad91298f03aabcb479aa23

  • SHA256

    e7682aa95ecad07c13ddff54ee90b53e2a126c75aa42aa5aabae5f5134dfa166

  • SHA512

    8bd1b5c4b214c5e0572eed3fff2e9a93a367333de02eaeb7b0047114a205b7f020806fd690c85727c23f63534f94b7846989c7a6a6e753a5a8bd80e2b240ceb8

  • SSDEEP

    786432:Lw9jREI8jLu0SWQqvvkY1yxB4BZQQ++TmhZduwjSh0x:LCjREIyLu0rQ3YAxB4BL+vfS2x

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 4324432c547b9d272033e7b4483b0bb3.bin
    .zip

    Password: infected

  • 000abc24d378fefbbee9e4466a200f4088e63c941bb7ecba18af54d6e23fecfa.zip
    .zip

    Password: infected

  • AbRoot.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    4a5f3c3aa39a4e0497dff0471239d5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AdTree.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    4a5f3c3aa39a4e0497dff0471239d5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    94edee571d3a6c3103264e81c1452c8a


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    665a7203ee328c8774e946b947bd499e


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    51d391f74bdd44264db9d63f1a545d8d


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    fd3bdea7e60f42da632f9afe3b5b5362


    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    3268f03d60f188163054c3ae889a8722


    Code Sign

    Headers

    Imports

    Sections

  • StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    911e3fa61860fcf3bb18b8468834b627


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nmprwjs
  • opengl64.dll
    .exe windows:6 windows x64 arch:x64

    12c058d908f07eb19d3f1f0a4bb41bef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ovaw
  • updater/manager/ks_tyres.ini
  • updater/nvdisps.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    dfbc2610ae891add5adee324a4d9ad92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • updater/nvdispsr.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • updater/nvptxJitCompiler32.dll
    .dll windows:6 windows x86 arch:x86

    a21080ac288fcf24521518c1d5302242


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/trading_api64.dll
    .dll windows:5 windows x64 arch:x64

    f7d326cb8fdda36f97bcf61c5e808a67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/tradingnetworkingsockets.dll
    .dll windows:6 windows x64 arch:x64

    e917d42bcc53c047e3b944d762080d33


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • x86/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections