General

  • Target

    Dislyte_setup_0.0.4.exe

  • Size

    13.0MB

  • MD5

    f30399c8bf4eb9a17131d690ff0ad6ae

  • SHA1

    5470e2299335b7cc842ebaa5f037249ded8a14c8

  • SHA256

    578a311c3e56fd9bdba19b2b77d51042b29990645fe19a3725c52ac05cf3d499

  • SHA512

    7efd180f87e2b3e2f4442b57b64e1ad23a0f77add7228d386edb3c68234ace902e3466ac8ecf294a156439fcef727d8b73cab84439cab72cd3a3f37419647891

  • SSDEEP

    393216:TXZsb9BjOBTuKPTm89HldLz5tg4iX8zZiN6:TI9xO77vldv5tgn6z

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Dislyte_setup_0.0.4.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsLauncher.dll
    .dll windows:6 windows x86 arch:x86

    5df734bd66b1927d9bb0b198104c516f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • launcher.7z
    .7z
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • DislyteLauncher.exe
    .exe windows:6 windows x86 arch:x86

    c344d1ae8b352ee912236301b3f45640


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DislyteUninst.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NsLauncher.dll
    .dll windows:6 windows x86 arch:x86

    5df734bd66b1927d9bb0b198104c516f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resource/cer/cacert.pem
  • resource/data/init.dat
  • resource/data/ver.dat
  • resource/img/bg_progress.png
    .png
  • resource/img/bg_setting.png
    .png
  • resource/img/btn_1.png
    .png
  • resource/img/btn_11.png
    .png
  • resource/img/btn_2.png
    .png
  • resource/img/btn_3.png
    .png
  • resource/img/btn_4.png
    .png
  • resource/img/btn_5.png
    .png
  • resource/img/btn_6.png
    .png
  • resource/img/btn_7.png
    .png
  • resource/img/btn_8.png
    .png
  • resource/img/btn_9.png
    .png
  • resource/img/btn_bottom.png
    .png
  • resource/img/btn_close.png
    .png
  • resource/img/btn_mini.png
    .png
  • resource/img/btn_more.png
    .png
  • resource/img/btn_option_close.png
    .png
  • resource/img/btn_option_update.png
    .png
  • resource/img/btn_playnow.png
    .png
  • resource/img/btn_playnow_hot.png
    .png
  • resource/img/btn_primary.png
    .png
  • resource/img/btn_rounded.png
    .png
  • resource/img/btn_setting_speedtip.png
    .png
  • resource/img/combo.png
    .png
  • resource/img/fg_progress.png
    .png
  • resource/img/gamedir_down.png
    .png
  • resource/img/icon - 副本.ico
  • resource/img/icon.ico
  • resource/img/icon_chk.png
    .png
  • resource/img/icon_close.png
    .png
  • resource/img/icon_option_selected.png
    .png
  • resource/img/icon_sel.png
    .png
  • resource/img/icon_set.png
    .png
  • resource/img/jpg_0.jpg
    .jpg
  • resource/img/jpg_1.jpeg
    .jpg
  • resource/img/jpg_2.png
    .png
  • resource/img/jpg_3.jpeg
    .jpg
  • resource/img/jpg_4.jpeg
    .jpg
  • resource/img/launcher_bg.jpg
    .jpg
  • resource/img/left_btn.png
    .png
  • resource/img/left_btn_click.png
    .png
  • resource/img/logo.png
    .png
  • resource/img/menu_bg.png
    .png
  • resource/img/menu_bg_hover.png
    .png
  • resource/img/menu_icon.png
    .jpg
    • https://lilith.com

  • resource/img/option_btn.png
    .png
  • resource/img/option_btn_white.png
    .png
  • resource/img/right_btn.png
    .png
  • resource/img/right_btn_click.png
    .png
  • resource/img/scrollbar_bg.png
    .png
  • resource/img/tab_left.png
    .png
  • resource/img/tab_right.png
    .png
  • resource/img/text_progress.bmp
  • resource/img/text_progress.png
    .png
  • resource/lang/ar.js
  • resource/lang/de.js
  • resource/lang/en.js
  • resource/lang/es.js
  • resource/lang/fr.js
  • resource/lang/hi.js
  • resource/lang/id.js
  • resource/lang/it.js
  • resource/lang/ja.js
  • resource/lang/ko.js
  • resource/lang/lang.xml
    .xml
  • resource/lang/ms.js
  • resource/lang/pl.js
  • resource/lang/pt_BR.js
  • resource/lang/ru.js
  • resource/lang/th.js
  • resource/lang/tl.js
  • resource/lang/tr.js
  • resource/lang/vi.js
  • resource/lang/zh_CN.js
  • resource/lang/zh_TW.js
  • resource/res.xml
    .xml
  • resource/xml/ann_list_item.xml
    .xml
  • resource/xml/ann_list_option.xml
    .xml
  • resource/xml/gamedir_select_box.xml
    .xml
  • resource/xml/launcher.xml
    .xml
  • resource/xml/listitem.xml
    .xml
  • resource/xml/menu_toolbar.xml
  • resource/xml/menu_tray.xml
  • resource/xml/msg_box.xml
    .xml
  • resource/xml/msg_check_box.xml
    .xml
  • resource/xml/project.dui
    .xml
  • resource/xml/set.xml
    .xml
  • resource/xml/title_item.xml
    .xml
  • resource/xml/ver_msg_box.xml
    .xml