General

  • Target
    SoulFire-2.10.1-x64.exe
  • Size 168.7MB
  • Sample261017-by8nesfx2m
  • SHA256 7e69a84d32e4a2206711c02040e4a0a243711524e3c55d7cafcddd7ce57c3dd3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • SoulFire-2.10.1-x64.exe
    .exe 168.7MB
  • $PLUGINSDIR/SpiderBanner.dll
    .dll 9KB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/app-64.7z
    .7z 168.2MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    19.5MB
  • SoulFire.exe
    .exe 233.1MB
  • chrome_100_percent.pak
    702KB
  • chrome_200_percent.pak
    1.2MB
  • d3dcompiler_47.dll
    .dll 4.5MB
  • dxcompiler.dll
    .dll 24.6MB
  • dxil.dll
    .dll 1.4MB
  • ffmpeg.dll
    .dll 3.0MB
  • icudtl.dat
    10.4MB
  • locales/af.pak
    621KB
  • locales/am.pak
    1005KB
  • locales/ar.pak
    1.1MB
  • locales/bg.pak
    1.1MB
  • locales/bn.pak
    1.4MB
  • locales/ca.pak
    700KB
  • locales/cs.pak
    725KB
  • locales/da.pak
    650KB
  • locales/de.pak
    701KB
  • locales/el.pak
    1.2MB
  • locales/en-GB.pak
    566KB
  • locales/en-US.pak
    572KB
  • locales/es-419.pak
    691KB
  • locales/es.pak
    687KB
  • locales/et.pak
    627KB
  • locales/fa.pak
    1.0MB
  • locales/fi.pak
    639KB
  • locales/fil.pak
    724KB
  • locales/fr.pak
    745KB
  • locales/gu.pak
    1.4MB
  • locales/he.pak
    907KB
  • locales/hi.pak
    1.5MB
  • locales/hr.pak
    698KB
  • locales/hu.pak
    747KB
  • locales/id.pak
    620KB
  • locales/it.pak
    677KB
  • locales/ja.pak
    822KB
  • locales/kn.pak
    1.6MB
  • locales/ko.pak
    701KB
  • locales/lt.pak
    759KB
  • locales/lv.pak
    756KB
  • locales/ml.pak
    1.7MB
  • locales/mr.pak
    1.4MB
  • locales/ms.pak
    652KB
  • locales/nb.pak
    623KB
  • locales/nl.pak
    649KB
  • locales/pl.pak
    724KB
  • locales/pt-BR.pak
    680KB
  • locales/pt-PT.pak
    684KB
  • locales/ro.pak
    711KB
  • locales/ru.pak
    1.1MB
  • locales/sk.pak
    737KB
  • locales/sl.pak
    705KB
  • locales/sr.pak
    1.1MB
  • locales/sv.pak
    631KB
  • locales/sw.pak
    669KB
  • locales/ta.pak
    1.7MB
  • locales/te.pak
    1.6MB
  • locales/th.pak
    1.3MB
  • locales/tr.pak
    681KB
  • locales/uk.pak
    1.2MB
  • locales/ur.pak
    1023KB
  • locales/vi.pak
    810KB
  • locales/zh-CN.pak
    578KB
  • locales/zh-TW.pak
    570KB
  • resources.pak
    11.9MB
  • resources/app-update.yml
    166B
  • resources/app.asar
    292.2MB
  • resources/app.asar.unpacked/node_modules/@bufbuild/buf-win32-x64/bin/buf.exe
    .exe 52.8MB
  • resources/app.asar.unpacked/node_modules/@bufbuild/buf-win32-x64/bin/protoc-gen-buf-breaking.exe
    .exe 40.6MB
  • resources/app.asar.unpacked/node_modules/@bufbuild/buf-win32-x64/bin/protoc-gen-buf-lint.exe
    .exe 30.3MB
  • resources/app.asar.unpacked/node_modules/@bufbuild/buf-win32-x64/package.json
    337B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher-win32-x64/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher-win32-x64/package.json
    605B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher-win32-x64/watcher.node
    .dll 518KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.node.recipe
    333B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/CL.command.1.tlog
    40KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/CL.read.1.tlog
    409KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/CL.write.1.tlog
    4KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/Cl.items.tlog
    2KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/link.command.1.tlog
    4KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/link.read.1.tlog
    9KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/link.secondary.1.tlog
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/link.write.1.tlog
    2KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/obj/watcher/watcher.tlog/watcher.lastbuildstate
    350B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/watcher.exp
    1011B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/watcher.iobj
    8.7MB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/watcher.ipdb
    3.8MB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/watcher.lib
    2KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/Release/watcher.node
    .dll 518KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/watcher.vcxproj
    .xml 13KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/build/watcher.vcxproj.filters
    .xml 6KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/index.js
    .js 1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/index.js.flow
    1010B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/LICENSE.md
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/common.gypi
    724B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/except.gypi
    560B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/index.js
    377B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/napi-inl.deprecated.h
    6KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/napi-inl.h
    .js 214KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/napi.h
    .js 112KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/node_addon_api.gyp
    793B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/node_api.gyp
    132B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/noexcept.gypi
    639B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/package-support.json
    467B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/package.json
    928B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/tools/README.md
    3KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/tools/check-napi.js
    .js 3KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/tools/clang-format.js
    .js .sh 1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/tools/conversion.js
    .js 14KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/node_modules/node-addon-api/tools/eslint-format.js
    .js .sh 2KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/package.json
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/scripts/build-from-source.js
    .js .sh 300B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/Backend.hh
    874B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/Debounce.hh
    883B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/DirTree.hh
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/Event.hh
    2KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/Glob.hh
    509B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/PromiseRunner.hh
    .js 2KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/Signal.hh
    816B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/Watcher.hh
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/kqueue/KqueueBackend.hh
    937B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/linux/InotifyBackend.hh
    946B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/macos/FSEventsBackend.hh
    565B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/shared/BruteForceBackend.hh
    733B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/wasm/WasmBackend.hh
    963B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/wasm/include.h
    3KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/watchman/BSER.hh
    1KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/watchman/IPC.hh
    4KB
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/watchman/WatchmanBackend.hh
    971B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/windows/WindowsBackend.hh
    360B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/src/windows/win_utils.hh
    238B
  • resources/app.asar.unpacked/node_modules/@parcel/watcher/wrapper.js
    2KB
  • resources/elevate.exe
    .exe 105KB
  • snapshot_blob.bin
    360KB
  • v8_context_snapshot.bin
    724KB
  • vk_swiftshader.dll
    .dll 5.3MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 917KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB
  • $R0/Uninstall SoulFire.exe
    .exe 143KB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB

SoulFire-2.10.1-x64.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 7e69a84d32e4a2206711c02040e4a0a243711524e3c55d7cafcddd7ce57c3dd3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:2d:79:95:33:1f:d0:36:e7:78:89:d5:89:63:e4:36:9e:f8:98:d3:90:c0:1f:a7:61:74:92:b8:d2:7f:dc:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths