GetPluginInfo
Overview
overview
3Static
static
Uninstall.exe
windows7-x64
1Uninstall.exe
windows10-2004-x64
1data/App/0...er.exe
windows7-x64
1data/App/0...er.exe
windows10-2004-x64
1data/App/0...er.exe
windows7-x64
1data/App/0...er.exe
windows10-2004-x64
1plugins/0/StdUI.dll
windows7-x64
1plugins/0/StdUI.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Uninstall.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Uninstall.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
data/App/0/FxScanner.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
data/App/0/FxScanner.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
data/App/0/RScanner.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
data/App/0/RScanner.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
plugins/0/StdUI.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
plugins/0/StdUI.dll
Resource
win10v2004-20220901-en
General
-
Target
c7a9924b9088fefbedde6512363e850e2e09afec65358282a57141d8997ae196
-
Size
889KB
-
MD5
e01974fa7d0ffdb393cb272c51dc8d05
-
SHA1
b7e20555d6dc43d15463823f865dcfc2db1f8fe5
-
SHA256
c7a9924b9088fefbedde6512363e850e2e09afec65358282a57141d8997ae196
-
SHA512
e02ab04562475dbbd330a88f9edfab75ddecda0e22ce559b86c7b3322dfc938feb7efa5ad062043f7bde9332e9de944dd78aaf7ebf670de0b2f2de611c22d56e
-
SSDEEP
12288:JFzRp83sOWL3CTzQiceKoRibVPfOYpmtAEZVkHnaIQyPXpIubgJG45KeQA9:7zRp3OHcLoRaPTpMFVYnhh1LjeB
Malware Config
Signatures
Files
-
c7a9924b9088fefbedde6512363e850e2e09afec65358282a57141d8997ae196.cab
-
Uninstall.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 116B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
data/App/0/FILE.txt
-
data/App/0/FxScanner.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 32B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
data/App/0/License.txt
-
data/App/0/RScanner.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 741KB - Virtual size: 741KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 399KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
data/App/0/Readme.txt
-
data/App/0/blacklist.txt
-
data/App/0/history.txt
-
data/App/0/sounds/chimes.wav
-
data/App/0/sounds/success.wav
-
db.pdb
-
lng/Bgr.lng
-
lng/Csy.lng
-
lng/Deu.lng
-
lng/Enu.lng
-
lng/Epo.lng
-
lng/Fra.lng
-
lng/Hun.lng
-
lng/Nld.lng
-
lng/Plk.lng
-
lng/Ptb.lng
-
lng/Rus.lng
-
lng/Sky.lng
-
lng/Ukr.lng
-
main.pdb
-
plugins/0/StdUI.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
plugins/0/lng/Bgr.lng
-
plugins/0/lng/Csy.lng
-
plugins/0/lng/Deu.lng
-
plugins/0/lng/Enu.lng
-
plugins/0/lng/Epo.lng
-
plugins/0/lng/Fra.lng
-
plugins/0/lng/Hun.lng
-
plugins/0/lng/Nld.lng
-
plugins/0/lng/Plk.lng
-
plugins/0/lng/Ptb.lng
-
plugins/0/lng/Rus.lng
-
plugins/0/lng/Sky.lng
-
plugins/0/lng/Ukr.lng
-
presetup.bmp
-
presetup/BEANY.BMP
-
presetup/License.txt
-
presetup/Readme.txt
-
presetup/Thumbs.db
-
presetup/bgrnd1.bmp
-
presetup/gins.bmp