General

  • Target

    NewRelease_127_337_393.zip

  • Size

    7.7MB

  • MD5

    0c5f3b153870254055cf385ed7284896

  • SHA1

    9deb8d970e1d22c88fa570c23010c03e8c1428a2

  • SHA256

    a8e7fcd3082840075dae30a1604cffb215299f554561ba6258658d5511bb9d6d

  • SHA512

    3005f86fa5912e2d26cde18c1030b5856c959b515ad988031d2f1b4c55e261706e19488f2137625d8968556144a330ab46838b161ce0d4eddf88963ebd72dea7

  • SSDEEP

    196608:cWB0gVukWXTUOGqFlbQN5HBVN7VByCcTKo37rKEAdZu:R0gVpMbFl8NRBVNBvkKEws

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • NewRelease_127_337_393.zip
    .zip
  • Update.exe
    .exe windows:6 windows x64 arch:x64

    b370239aa1ab81ff8417f58cb4554bdc


    Code Sign

    Headers

    Imports

    Sections

  • boost_filesystem-vc142-mt-x64-1_84.dll
    .dll windows:6 windows x64 arch:x64

    831c4d251df10b030bf96433e7f5148e


    Headers

    Imports

    Exports

    Sections

  • boost_json-vc142-mt-x64-1_84.dll
    .dll windows:6 windows x64 arch:x64

    d1d32a2018f3af1b26512324b8fd2366


    Headers

    Imports

    Exports

    Sections

  • boost_log-vc142-mt-x64-1_84.dll
    .dll windows:6 windows x64 arch:x64

    8cd6201913772a032535595de3b386f3


    Headers

    Imports

    Exports

    Sections

  • boost_log_setup-vc142-mt-x64-1_84.dll
    .dll windows:6 windows x64 arch:x64

    4cdcf3abc8b20f97f7694c632cf3db63


    Headers

    Imports

    Exports

    Sections

  • boost_thread-vc142-mt-x64-1_84.dll
    .dll windows:6 windows x64 arch:x64

    6567ce3ce8bf37229b42656915b116b7


    Headers

    Imports

    Exports

    Sections

  • concrt140_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    17466d5062fa050f61eeaf7ccdaeedbf


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • msvcp140_2_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • msvcp140_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • msvcp140_atomic_wait_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    536e29dae203b5f7347030aec0cba513


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    9e15e51a928a55e590725db33bb4230a


    Headers

    Imports

    Exports

    Sections

  • vcomp140_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • vcruntime140_app.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • vcruntime210.dll
  • vcruntime211.dll
  • zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections