General

  • Target

    virus.zip

  • Size

    22.3MB

  • MD5

    507d9ee335e77df6f3324096c52c242b

  • SHA1

    4137e40492668b0f0b837484590c0714d3bc83a9

  • SHA256

    fafbe4af1366a18fb15be35afa7db39ded10c6a5188c290ffe794e0ae1aed05e

  • SHA512

    ddaeeb8f24c7d3221c67a447b5756c625f77f359f4a638f9a43d56abe051e3bd68d9af44e1ac40f871f75117ce542fd014e7dcbeb5298fa59b1c188b6f016caf

  • SSDEEP

    393216:mclI7ub4i1TgEg96a+njJpzwcjIU0TJpfVCtjvxsixXiISDyrnjSKlfCcO2GJakz:mT7ubv1T6wJpRIU0TJhVKjvJQR8jdlfg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • virus.zip
    .zip
  • Data/NAudio.xml
    .xml
  • Data/Updater.exe
    .exe windows:6 windows x64 arch:x64

    894cc25256a891de00b12211d82b7c92


    Code Sign

    Headers

    Imports

    Sections

  • Data/Updater.exe.config
    .xml
  • Data/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/devtools_resources.pak
    .js
  • Data/en-US/ActiveXInstallService.adml
    .xml
  • Data/en-US/AddRemovePrograms.adml
    .xml
  • Data/en-US/AppCompat.adml
    .xml
  • Data/en-US/AppXRuntime.adml
    .xml
  • Data/en-US/AppxPackageManager.adml
    .xml
  • Data/en-US/AttachmentManager.adml
    .xml
  • Data/en-US/AuditSettings.adml
    .xml
  • Data/en-US/AutoPlay.adml
    .xml
  • Data/en-US/Biometrics.adml
    .xml
  • Data/en-US/Bits.adml
    .xml
  • Data/en-US/CEIPEnable.adml
    .xml
  • Data/en-US/COM.adml
    .xml
  • Data/en-US/CipherSuiteOrder.adml
    .xml
  • Data/en-US/Conf.adml
    .xml
  • Data/en-US/ControlPanel.adml
    .xml
  • Data/en-US/ControlPanelDisplay.adml
    .xml
  • Data/en-US/Cpls.adml
    .xml
  • Data/en-US/CredSsp.adml
    .xml
  • Data/en-US/CredUI.adml
    .xml
  • Data/en-US/CredentialProviders.adml
    .xml
  • Data/en-US/CtrlAltDel.adml
    .xml
  • Data/en-US/DCOM.adml
    .xml
  • Data/en-US/DFS.adml
    .xml
  • Data/en-US/DWM.adml
    .xml
  • Data/en-US/Desktop.adml
    .xml
  • Data/en-US/DeviceCompat.adml
    .xml
  • Data/en-US/DeviceInstallation.adml
    .xml
  • Data/en-US/DeviceSetup.adml
    .xml
  • Data/en-US/DigitalLocker.adml
    .xml
  • Data/en-US/DiskDiagnostic.adml
    .xml
  • Data/en-US/DiskNVCache.adml
    .xml
  • Data/en-US/DiskQuota.adml
    .xml
  • Data/en-US/DistributedLinkTracking.adml
    .xml
  • Data/en-US/DnsClient.adml
    .xml
  • Data/en-US/EAIME.adml
    .xml
  • Data/en-US/EarlyLaunchAM.adml
  • Data/en-US/EdgeUI.adml
    .xml
  • Data/en-US/EncryptFilesonMove.adml
    .xml
  • Data/en-US/ErrorReporting.adml
    .xml
  • Data/en-US/EventForwarding.adml
    .xml
  • Data/en-US/EventLog.adml
    .xml
  • Data/en-US/EventViewer.adml
    .xml
  • Data/en-US/Explorer.adml
    .xml
  • Data/en-US/ExternalBoot.adml
    .xml
  • Data/en-US/FileHistory.adml
    .xml
  • Data/en-US/FileRecovery.adml
    .xml
  • Data/en-US/FileRevocation.adml
    .xml
  • Data/en-US/FileServerVSSProvider.adml
    .xml
  • Data/en-US/FileSys.adml
    .xml
  • Data/en-US/FolderRedirection.adml
    .xml
  • Data/en-US/FramePanes.adml
    .xml
  • Data/en-US/GameExplorer.adml
    .xml
  • Data/en-US/Globalization.adml
    .xml
  • Data/en-US/GroupPolicy-Server.adml
    .xml
  • Data/en-US/GroupPolicy.adml
    .xml
  • Data/en-US/GroupPolicyPreferences.adml
    .xml
  • Data/en-US/Help.adml
    .xml
  • Data/en-US/HelpAndSupport.adml
    .xml
  • Data/en-US/ICM.adml
    .xml
  • Data/en-US/IIS.adml
    .xml
  • Data/en-US/InetRes.adml
    .xml
  • Data/en-US/InkWatson.adml
    .xml
  • Data/en-US/KDC.adml
    .xml
  • Data/en-US/Kerberos.adml
    .xml
  • Data/en-US/LanmanServer.adml
    .xml
  • Data/en-US/LeakDiagnostic.adml
    .xml
  • Data/en-US/LinkLayerTopologyDiscovery.adml
    .xml
  • Data/en-US/LocationProviderAdm.adml
    .xml
  • Data/en-US/Logon.adml
    .xml
  • Data/en-US/MMC.adml
    .xml
  • Data/en-US/MMCSnapIns2.adml
    .xml
  • Data/en-US/MMCSnapins.adml
    .xml
  • Data/en-US/MSDT.adml
    .xml
  • Data/en-US/MSI.adml
    .xml
  • Data/en-US/MediaCenter.adml
    .xml
  • Data/en-US/MobilePCMobilityCenter.adml
    .xml
  • Data/en-US/MobilePCPresentationSettings.adml
    .xml
  • Data/en-US/Msi-FileRecovery.adml
    .xml
  • Data/en-US/NAPXPQec.adml
    .xml
  • Data/en-US/NCSI.adml
    .xml
  • Data/en-US/Netlogon.adml
    .xml
  • Data/en-US/NetworkConnections.adml
    .xml
  • Data/en-US/NetworkIsolation.adml
  • Data/en-US/NetworkProjection.adml
    .xml
  • Data/en-US/OfflineFiles.adml
    .xml
  • Data/en-US/P2P-pnrp.adml
    .xml
  • Data/en-US/ParentalControls.adml
    .xml
  • Data/en-US/PeerToPeerCaching.adml
    .xml
  • Data/en-US/PenTraining.adml
    .xml
  • Data/en-US/PerformanceDiagnostics.adml
    .xml
  • Data/en-US/PerformancePerftrack.adml
    .xml
  • Data/en-US/Power.adml
    .xml
  • Data/en-US/PowerShellExecutionPolicy.adml
    .xml
  • Data/en-US/PreviousVersions.adml
    .xml
  • Data/en-US/Printing.adml
    .xml
  • Data/en-US/Printing2.adml
    .xml
  • Data/en-US/Programs.adml
    .xml
  • Data/en-US/PswdSync.adml
    .xml
  • Data/en-US/QOS.adml
    .xml
  • Data/en-US/RPC.adml
    .xml
  • Data/en-US/RacWmiProv.adml
    .xml
  • Data/en-US/Radar.adml
    .xml
  • Data/en-US/ReAgent.adml
    .xml
  • Data/en-US/Reliability.adml
    .xml
  • Data/en-US/RemoteAssistance.adml
    .xml
  • Data/en-US/RemovableStorage.adml
    .xml
  • Data/en-US/Scripts.adml
    .xml
  • Data/en-US/Securitycenter.adml
    .xml
  • Data/en-US/Sensors.adml
    .xml
  • Data/en-US/ServerManager.adml
    .xml
  • Data/en-US/Servicing.adml
    .xml
  • Data/en-US/SettingSync.adml
    .xml
  • Data/en-US/Setup.adml
    .xml
  • Data/en-US/SharedFolders.adml
    .xml
  • Data/en-US/Sharing.adml
    .xml
  • Data/en-US/Shell-CommandPrompt-RegEditTools.adml
    .xml
  • Data/en-US/ShellWelcomeCenter.adml
    .xml
  • Data/en-US/Sidebar.adml
    .xml
  • Data/en-US/SkyDrive.adml
    .xml
  • Data/en-US/Smartcard.adml
    .xml
  • Data/en-US/Snis.adml
    .xml
  • Data/en-US/Snmp.adml
    .xml
  • Data/en-US/SoundRec.adml
    .xml
  • Data/en-US/StartMenu.adml
    .xml
  • Data/en-US/SystemRestore.adml
    .xml
  • Data/en-US/TPM.adml
    .xml
  • Data/en-US/TabletPCInputPanel.adml
    .xml
  • Data/en-US/TabletShell.adml
    .xml
  • Data/en-US/TaskScheduler.adml
    .xml
  • Data/en-US/Taskbar.adml
    .xml
  • Data/en-US/TerminalServer-Server.adml
    .xml
  • Data/en-US/TerminalServer.adml
    .xml
  • Data/en-US/Thumbnails.adml
    .xml
  • Data/en-US/TouchInput.adml
    .xml
  • Data/en-US/UserProfiles.adml
    .xml
  • Data/en-US/VolumeEncryption.adml
    .xml
  • Data/en-US/W32Time.adml
    .xml
  • Data/en-US/WCM.adml
    .xml
  • Data/en-US/WDI.adml
    .xml
  • Data/en-US/WPN.adml
    .xml
  • Data/en-US/WinCal.adml
    .xml
  • Data/en-US/WinInit.adml
    .xml
  • Data/en-US/WinLogon.adml
    .xml
  • Data/en-US/Windows.adml
    .xml
  • Data/en-US/WindowsAnytimeUpgrade.adml
    .xml
  • Data/en-US/WindowsBackup.adml
    .xml
  • Data/en-US/WindowsColorSystem.adml
    .xml
  • Data/en-US/WindowsConnectNow.adml
    .xml
  • Data/en-US/WindowsDefender.adml
  • Data/en-US/WindowsExplorer.adml
    .xml
  • Data/en-US/WindowsFileProtection.adml
    .xml
  • Data/en-US/WindowsFirewall.adml
    .xml
  • Data/en-US/WindowsMail.adml
    .xml
  • Data/en-US/WindowsMediaDRM.adml
    .xml
  • Data/en-US/WindowsMediaPlayer.adml
    .xml
  • Data/en-US/WindowsMessenger.adml
    .xml
  • Data/en-US/WindowsProducts.adml
    .xml
  • Data/en-US/WindowsRemoteManagement.adml
    .xml
  • Data/en-US/WindowsRemoteShell.adml
    .xml
  • Data/en-US/WindowsServer.adml
    .xml
  • Data/en-US/WindowsUpdate.adml
    .xml
  • Data/en-US/Winsrv.adml
    .xml
  • Data/en-US/WordWheel.adml
    .xml
  • Data/en-US/WorkFolders-Client.adml
    .xml
  • Data/en-US/WorkplaceJoin.adml
    .xml
  • Data/en-US/fthsvc.adml
    .xml
  • Data/en-US/hotspotauth.adml
    .xml
  • Data/en-US/iSCSI.adml
    .xml
  • Data/en-US/msched.adml
    .xml
  • Data/en-US/nca.adml
  • Data/en-US/pca.adml
    .xml
  • Data/en-US/sdiageng.adml
    .xml
  • Data/en-US/srm-fci.adml
    .xml
  • Data/en-US/tcpip.adml
    .xml
  • Data/en-US/wlansvc.adml
    .xml
  • Data/en-US/wwansvc.adml
    .xml
  • Data/ffmpeg.dll
    .dll windows:10 windows x64 arch:x64

    91b8685f04cd4eceae98e68aec559609


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/icudtl.dat
  • Data/v8_context_snapshot.bin
  • NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    94edee571d3a6c3103264e81c1452c8a


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    665a7203ee328c8774e946b947bd499e


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    51d391f74bdd44264db9d63f1a545d8d


    Headers

    Imports

    Exports

    Sections

  • QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    fd3bdea7e60f42da632f9afe3b5b5362


    Headers

    Imports

    Exports

    Sections

  • RcClientBase.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Resource.ct
    .exe windows:5 windows x64 arch:x64

    8870e5f0f6b214acc91b528f57f49f92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:5 windows x86 arch:x86

    3268f03d60f188163054c3ae889a8722


    Code Sign

    Headers

    Imports

    Sections

  • StarBurn.dll
    .dll windows:6 windows x86 arch:x86

    911e3fa61860fcf3bb18b8468834b627


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UpdateClient.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • UpdateCommon.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • isjii
  • looelll
  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections