Resubmissions

27/11/2024, 05:53

241127-gljresxlek 10

General

  • Target

    fl.zip

  • Size

    172.1MB

  • MD5

    a0708a48eeabde5809b3e1cea195a1a2

  • SHA1

    14f2912ce1c4c013ca24e728e582c6e36c123d01

  • SHA256

    1181cd065415775a2e20766fcadc5a4b911ffaf7e0ec2a2526fce9330783b990

  • SHA512

    8c5ff155e53f82d940c4969f8dd39a0f965561543a407408fc9af65bbbfc1ecb0244471d059e37cf29afe7b477c1a88b7b4dcddee74cc0ec49190853b654b1bb

  • SSDEEP

    3145728:/HqaEU9Qv70Vo93mBOlRpDBIE/PcM7ocqIX9N9KHvi7MlU437cqIX9N9KHvi7MlP:ibU9Qj93mstDR764fIvi7Mlx4fIvi7Mt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • fl.zip
    .zip
  • KeyFile/1033/sharedmanagementobjects_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • KeyFile/1033/sqlsysclrtypes_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • KeyFile/1049/sharedmanagementobjects_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • KeyFile/1049/sqlsysclrtypes_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • License Terms/150/LocalDB/Binn/Resources/SqlUserInstance.rll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/de-DE/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/es-ES/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/fr-FR/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/it-IT/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/ja-JP/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/ko-KR/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/pt-BR/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/zh-CN/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/Resources/zh-TW/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • License Terms/150/LocalDB/Binn/SqlUserInstance.dll
    .dll windows:6 windows x86 arch:x86

    b0547bab9ed2aabbbfc847c2d4a998fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • License Terms/150/LocalDB/Binn/localdbxeventconfig.xml
  • License Terms/150/Shared/xe.dll
    .dll windows:6 windows x86 arch:x86

    a717c506893e6eb4a4cd9bdf05e01b92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • License Terms/License_SQLNCLI_ENU.txt
  • License Terms/SqlUserInstance.dll
    .dll windows:6 windows x86 arch:x86

    f2b222e5b77bb5e02c203c041a4e8c66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:6 windows x86 arch:x86

    ff9f3a86709796c17211f9df12aae74d


    Headers

    Imports

    Sections

  • Updates/80/COM/sqlvdi.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    6499b940213d268aa405068355eafe37


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Updates/80/Tools/Binn/sqlvdi.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    6499b940213d268aa405068355eafe37


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Updates/90/Shared/Resources/1028/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1031/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1033/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1036/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1040/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1041/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1042/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1046/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/1049/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/2052/License_SysClrTypes.rtf
    .rtf
  • Updates/90/Shared/Resources/3082/License_SysClrTypes.rtf
    .rtf
  • Updates/NVIDIA.dll
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    ebbf8979b75347d0acdd9feeb3fd079c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Dialer.dll
    .dll windows:4 windows x86 arch:x86

    fc7b09825514edc15eae44038ffaf8fa


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KMPXFileAssociate.exe
    .exe windows:5 windows x86 arch:x86

    a29162096e34efd9b13550344f69448d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KMPXFileAssociate_No.exe
    .exe windows:5 windows x86 arch:x86

    74492eb5830228dd1be918e5df403767


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    fe3375e7e4529b73ba45ab2246b9269b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    db80d5e142e716e818b7f4614dcade3c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $PLUGINSDIR/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • D3DCompiler_43.dll
    .dll windows:6 windows x64 arch:x64

    87e48ad40a89f4f6e1404989a85ca976


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KMPLoading.exe
    .exe windows:5 windows x64 arch:x64

    15b17ab1c07228a67689a61ecc919aca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KMPlayer64.exe
    .exe windows:5 windows x64 arch:x64

    87edbdfe442c3b8bd4ef4cf9789d4db7


    Code Sign

    Headers

    Imports

    Sections

  • LAVFilters64/IntelQuickSyncDecoder.dll
    .dll windows:6 windows x64 arch:x64

    7ee17ff1480e2c2f0e835108e2387b58


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/LAVAudio.ax
    .dll regsvr32 windows:6 windows x64 arch:x64

    fde72bfe152c625248bafe06ff574ec6


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/LAVFilters.Dependencies.manifest
    .xml
  • LAVFilters64/LAVSplitter.ax
    .dll regsvr32 windows:6 windows x64 arch:x64

    528c2976c9b88897baa0112f32612dbf


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/LAVVideo.ax
    .dll regsvr32 windows:6 windows x64 arch:x64

    8383d14909c277f0a7bcae58274d0ea1


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/avcodec-lav-59.dll
    .dll windows:4 windows x64 arch:x64

    42fcb56b81194566b1a4b098adea3f8e


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/avfilter-lav-8.dll
    .dll windows:4 windows x64 arch:x64

    064c25b7d400ecc327cbafd289b5bb92


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/avformat-lav-59.dll
    .dll windows:4 windows x64 arch:x64

    94409028111817d7af37186452f39fbe


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/avutil-lav-57.dll
    .dll windows:4 windows x64 arch:x64

    fd8e8173eaa9be18245aeb27b45e4a9f


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/ffmpeg.exe
    .exe windows:4 windows x86 arch:x86

    e296d3d015464dd93f2faf11b773830c


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/libbluray.dll
    .dll windows:6 windows x64 arch:x64

    75291682ce7f8dbd4fe8712e1c5dc803


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/swresample-lav-4.dll
    .dll windows:4 windows x64 arch:x64

    22976c4aaf32f9fb2a1a8292d344b06a


    Headers

    Imports

    Exports

    Sections

  • LAVFilters64/swscale-lav-6.dll
    .dll windows:4 windows x64 arch:x64

    e2f3c4e38203f63b3c503b0208b3b534


    Headers

    Imports

    Exports

    Sections

  • Plugin/youtube-dl.exe
    .exe windows:5 windows x86 arch:x86

    985a7b86c383570b8555b38c1f270b55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Shaders/Adaptive sharpen.hlsl
  • Shaders/BT601BT709.hlsl
  • Shaders/Contour.hlsl
  • Shaders/Deinterlace (blend).hlsl
  • Shaders/Denoise.hlsl
  • Shaders/DisplayLessThan16 v1_1.hlsl
  • Shaders/EdgeSharpen v1_1(jim ro).hlsl
  • Shaders/EdgeSharpen v1_1.hlsl
  • Shaders/Emboss.hlsl
  • Shaders/GrayScale.hlsl
  • Shaders/HorzFlip.hlsl
  • Shaders/Invert.hlsl
  • Shaders/LCD angle correction.hlsl
  • Shaders/Letterbox.hlsl
  • Shaders/Levels.hlsl
  • Shaders/Levels2.hlsl
  • Shaders/NightVision.hlsl
  • Shaders/Procamp.hlsl
  • Shaders/Remap_16_235.hlsl
  • Shaders/Sharpen.hlsl
  • Shaders/SharpenComplex (jim ro).hlsl
  • Shaders/SharpenComplex2.hlsl
  • Shaders/SharpenFlou (jim ro).hlsl
  • Shaders/Sharpen_3x3.hlsl
  • Shaders/Sharpen_5x5.hlsl
  • Shaders/Sphere.hlsl
  • Shaders/Spotlight.hlsl
  • Shaders/Undot.hlsl
  • Shaders/Undot_1.hlsl
  • Shaders/Unsharp mask.hlsl
  • Shaders/VertFlip.hlsl
  • Shaders/Wave.hlsl
  • Shaders/YV12 Chroma Upsampling.hlsl
  • UpLib.dll
    .dll windows:5 windows x64 arch:x64

    700fc4c6bf267bc4d2b452f37ef0ffa1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VSFilter.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    057d7d0f5562d1a769bf531eebfcd720


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:6 windows x64 arch:x64

    2ce80dc262aecd9b9f45ee13d6b30c08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dx9_43.dll
    .dll windows:6 windows x64 arch:x64

    336d8057d1db03e5a3ac3b62e8902f4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • files.txt
  • gpl.txt
  • kmpiconlib.dll
    .dll windows:5 windows x86 arch:x86

    f8771b34bfc977f28ac8d839f772fef1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x64 arch:x64

    3cdae84e4c8b52db77b9ca4ecc9cd4a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    73fae6439abe9f552dd6f7639c587573


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • utils.dll
    .dll windows:5 windows x64 arch:x64

    0be9ea2865df7ea99768c5cb3c234a11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Updates/ODBC/170/License Terms/License_msodbcsql_ENU.txt
  • Updates/ODBC/170/SDK/Include/msodbcsql.h
  • Updates/ODBC/170/SDK/Lib/x64/msodbcsql17.lib
  • Updates/ODBC/170/SDK/Lib/x86/msodbcsql17.lib
  • Updates/ODBC/update.dll
    .exe windows:6 windows x86 arch:x86

    e569e6f445d32ba23766ad67d1e3787f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • driver-x64.dll
    .exe windows:6 windows x86 arch:x86

    e569e6f445d32ba23766ad67d1e3787f


    Headers

    Imports

    Exports

    Sections