Overview

overview

10

Static

static

10

todolist_e...xt.dll

windows7-x64

1

todolist_e...xt.dll

windows10-2004-x64

1

todolist_e...ew.dll

windows7-x64

1

todolist_e...ew.dll

windows10-2004-x64

1

todolist_e...xt.dll

windows7-x64

1

todolist_e...xt.dll

windows10-2004-x64

1

todolist_e...ng.dll

windows7-x64

1

todolist_e...ng.dll

windows10-2004-x64

1

todolist_e...ML.exe

windows7-x64

1

todolist_e...ML.exe

windows10-2004-x64

1

todolist_e...ox.dll

windows7-x64

1

todolist_e...ox.dll

windows10-2004-x64

1

todolist_e...ge.dll

windows7-x64

1

todolist_e...ge.dll

windows10-2004-x64

1

todolist_e...re.dll

windows7-x64

1

todolist_e...re.dll

windows10-2004-x64

1

todolist_e...pt.dll

windows7-x64

1

todolist_e...pt.dll

windows10-2004-x64

1

todolist_e...rt.dll

windows7-x64

1

todolist_e...rt.dll

windows10-2004-x64

1

todolist_e...ge.dll

windows7-x64

1

todolist_e...ge.dll

windows10-2004-x64

1

todolist_e...rt.dll

windows7-x64

1

todolist_e...rt.dll

windows10-2004-x64

1

todolist_e...xt.dll

windows7-x64

1

todolist_e...xt.dll

windows10-2004-x64

1

todolist_e...ls.dll

windows7-x64

1

todolist_e...ls.dll

windows10-2004-x64

1

todolist_e...ge.dll

windows7-x64

1

todolist_e...ge.dll

windows10-2004-x64

1

todolist_e...re.dll

windows7-x64

1

todolist_e...re.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9733e3f15efe06bfbf6f1e890eee2f4b550f053acb18be931b1cb1c0c8f004ab

  • Size

    6.6MB

  • MD5

    4e040ae25a384a7559a0958e9c8ea0d5

  • SHA1

    bf71b7f230ff1b75074a68faff107653e7e63b80

  • SHA256

    9733e3f15efe06bfbf6f1e890eee2f4b550f053acb18be931b1cb1c0c8f004ab

  • SHA512

    0cf19d4a93a8d1d5ad86b560c19c7ac2873991d2f519f6da4bdab16b39a2856ef488ca2ffc3599a17a26217a24df9cd94ba74e3f131bd053992afa0f28111926

  • SSDEEP

    196608:d5S62JNK5FttlfuORveTBcMCwzUbiNhY6c+Ba4:d5S6EKX/lGOIBcM5zmEa4

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://abstractspoon.pbworks.com/f/todolist_exe.zip

Signatures

  • Unsigned PE 59 IoCs

    Checks for missing Authenticode signature.

Files

  • 9733e3f15efe06bfbf6f1e890eee2f4b550f053acb18be931b1cb1c0c8f004ab
    .zip
  • todolist_exe/BurndownExt.dll
    .dll windows x86

    9c748900ec7c6598aa0732fb62da249a


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/Calendar.DayView.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/CalendarExt.dll
    .dll windows x86

    09c995cabefede18f9641f3cc65dc4fe


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/CommandHandling.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/ConvertRTFToHTML.exe
    .exe windows x86

    35690b073827a2cb500b362b15a34b5f


    Headers

    Imports

    Sections

  • todolist_exe/CustomComboBox.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/DayViewUIExtensionBridge.dll
    .dll windows x86

    d59cb0807befe220603cdb116418961f


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/DayViewUIExtensionCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/EncryptDecrypt.dll
    .dll windows x86

    b519c8b33d3198f8917dcb361112bf3d


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/FMindImportExport.dll
    .dll windows x86

    05df7c11bfd9c43f3dddf59873dfbee6


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/FtpStorage.dll
    .dll windows x86

    988d5c51e617914ccb4785c28d085c9d


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/GPExport.dll
    .dll windows x86

    7e415b276de2dfe1fbd35443dbdffc98


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/GanttChartExt.dll
    .dll windows x86

    e898c433b0848d53eece8c8a9ed072dc


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/Gma.CodeCloud.Controls.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/HTMLContentControlBridge.dll
    .dll windows x86

    1fe50ea8806963f5f51e5721f20cd2bc


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/HTMLContentControlCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/HTMLReportExporterBridge.dll
    .dll windows x86

    4ea7f8dbdf9e18c8ebaa5a4a5a9d6ec2


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/HTMLReportExporterCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/HtmlAgilityPack.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Install.Linux.txt
  • todolist_exe/Install.Windows.txt
  • todolist_exe/Itenso.Rtf.Converter.Html.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Itenso.Rtf.Interpreter.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Itenso.Rtf.Parser.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Itenso.Solutions.Community.Rtf2Html.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Itenso.Sys.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/KanbanBoard.dll
    .dll windows x86

    edb87e3ba9e8c99372c0d40f2688471a


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/LinkLabelEx.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/MDContentControlBridge.dll
    .dll windows x86

    1fe50ea8806963f5f51e5721f20cd2bc


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/MDContentControlCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/MLOImport.dll
    .dll windows x86

    1ed026ece812cc264f74bfc382dd3e0b


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/MSDN.HtmlEditorControl.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Markdig.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Microsoft.VisualStudio.OLE.Interop.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/MindMapUIExtensionBridge.dll
    .dll windows x86

    20ebf8492161cdd29f7605670267db96


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/MindMapUIExtensionCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/MySpellCheck.dll
    .dll windows x86

    7b04dc4adf59543e58f7000066e4d579


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/PDFExporterBridge.dll
    .dll windows x86

    4ea7f8dbdf9e18c8ebaa5a4a5a9d6ec2


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/PDFExporterCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/PlainTextImport.dll
    .dll windows x86

    b87109ffab3ed6f1a3376033353646f7


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/PluginHelpers.dll
    .dll windows x86

    ea25749bff678af96adcb811cd97df9f


    Headers

    Imports

    Sections

  • todolist_exe/RTFContentCtrl.dll
    .dll windows x86

    9c72891c044d1ab20f3392ce8aef8af1


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/Resources/Cursors/Locked.cur
  • todolist_exe/Resources/Cursors/NoDrag.cur
  • todolist_exe/Resources/Examples/Evidence Board Photos/beetle.jpg
    .jpg
  • todolist_exe/Resources/Examples/Evidence Board Photos/doll.jpg
    .jpg
  • todolist_exe/Resources/Examples/Evidence Board Photos/doors.jpg
    .jpg
  • todolist_exe/Resources/Examples/Evidence Board Photos/typewriter.jpg
    .jpg
  • todolist_exe/Resources/Examples/Evidence Board Photos/washing line.jpg
    .jpg
  • todolist_exe/Resources/Examples/Evidence Board.tdl
  • todolist_exe/Resources/Examples/Gantt Chart.tdl
  • todolist_exe/Resources/Examples/Introduction.tdl
  • todolist_exe/Resources/Examples/Introduction_Vietnamese.tdl
  • todolist_exe/Resources/Examples/MeetingMinutes.rbt
    .js
  • todolist_exe/Resources/Examples/Workload.tdl
  • todolist_exe/Resources/Icons/sample.ico
  • todolist_exe/Resources/Misc/Help.ini
  • todolist_exe/Resources/Misc/IgnoreCrashDumps.reg
  • todolist_exe/Resources/Misc/KeepCrashDumps.reg
  • todolist_exe/Resources/Misc/ManualUpdater.ps1
    .ps1
  • todolist_exe/Resources/Misc/README.txt
  • todolist_exe/Resources/Misc/TdlSchema.xml
  • todolist_exe/Resources/Misc/TdlSchema.xsd
  • todolist_exe/Resources/Misc/UltramonCompatibilityFix.reg
  • todolist_exe/Resources/Scripts/File Link Verifier/Online Help.url
    .url
  • todolist_exe/Resources/Scripts/File Link Verifier/ToDoList_2004.ico
  • todolist_exe/Resources/Scripts/File Link Verifier/examples/filiverto_test_cases.tdl
  • todolist_exe/Resources/Scripts/File Link Verifier/filiverto.pyw
  • todolist_exe/Resources/Stylesheets/Z_DetailedReport.xsl
    .xml
  • todolist_exe/Resources/Stylesheets/Z_SimpleReport.xsl
    .xml
  • todolist_exe/Resources/Stylesheets/Z_TimeSpentReport.xsl
    .xml
  • todolist_exe/Resources/Stylesheets/tgEstimatesAndActuals_eng.xsl
    .xml
  • todolist_exe/Resources/Stylesheets/tgEstimates_eng.xsl
    .xml
  • todolist_exe/Resources/Themes/ThemeBeige.xml
  • todolist_exe/Resources/Themes/ThemeBlue.Original.xml
  • todolist_exe/Resources/Themes/ThemeBlue.xml
  • todolist_exe/Resources/Themes/ThemeBlueXP.xml
  • todolist_exe/Resources/Themes/ThemeGray.xml
  • todolist_exe/Resources/Themes/ThemeGreen.xml
  • todolist_exe/Resources/Themes/ThemeGreenXP.xml
  • todolist_exe/Resources/Themes/ThemePurple.xml
  • todolist_exe/Resources/Themes/ThemeSteel.xml
  • todolist_exe/Resources/Themes/ThemeVS2010.Original.xml
  • todolist_exe/Resources/Themes/ThemeVS2010.xml
  • todolist_exe/Resources/Themes/ThemeWhite.Original.xml
  • todolist_exe/Resources/Themes/ThemeWhite.xml
  • todolist_exe/Resources/Themes/ThemeWin7Basic.xml
  • todolist_exe/Resources/Translations/Danish (Denmark).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Danish (Denmark).csv
  • todolist_exe/Resources/Translations/Danish (Denmark).png
    .png
  • todolist_exe/Resources/Translations/English (UK).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/English (US).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/English (US).csv
  • todolist_exe/Resources/Translations/English (US).png
    .png
  • todolist_exe/Resources/Translations/Francais (France).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Francais (France).csv
  • todolist_exe/Resources/Translations/Francais (France).png
    .png
  • todolist_exe/Resources/Translations/German (Germany).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/German (Germany).csv
  • todolist_exe/Resources/Translations/German (Germany).png
    .png
  • todolist_exe/Resources/Translations/Greek (Greece).csv
  • todolist_exe/Resources/Translations/Greek (Greece).png
    .png
  • todolist_exe/Resources/Translations/Hangul (Korea).csv
  • todolist_exe/Resources/Translations/Hangul (Korea).png
    .png
  • todolist_exe/Resources/Translations/Hebrew (Israel).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Hebrew (Israel).csv
  • todolist_exe/Resources/Translations/Hebrew (Israel).png
    .png
  • todolist_exe/Resources/Translations/Italiano (Italia).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Italiano (Italia).csv
  • todolist_exe/Resources/Translations/Italiano (Italia).png
    .png
  • todolist_exe/Resources/Translations/Japanese (Japan).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Japanese (Japan).csv
  • todolist_exe/Resources/Translations/Japanese (Japan).png
    .png
  • todolist_exe/Resources/Translations/Nederlands (Belgium).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Nederlands (Belgium).csv
  • todolist_exe/Resources/Translations/Nederlands (Belgium).png
    .png
  • todolist_exe/Resources/Translations/Polish (Poland).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Polish (Poland).csv
  • todolist_exe/Resources/Translations/Polish (Poland).png
    .png
  • todolist_exe/Resources/Translations/Russian (Russia).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Russian (Russia).csv
  • todolist_exe/Resources/Translations/Russian (Russia).png
    .png
  • todolist_exe/Resources/Translations/Simplified Chinese (China).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Simplified Chinese (China).csv
  • todolist_exe/Resources/Translations/Simplified Chinese (China).png
    .png
  • todolist_exe/Resources/Translations/Slovak (Slovensko).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Slovak (Slovensko).csv
  • todolist_exe/Resources/Translations/Slovak (Slovensko).png
    .png
  • todolist_exe/Resources/Translations/Slovenian (Slovenia).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Slovenian (Slovenia).csv
  • todolist_exe/Resources/Translations/Slovenian (Slovenia).png
    .png
  • todolist_exe/Resources/Translations/Spanish (Spain).WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/Spanish (Spain).csv
  • todolist_exe/Resources/Translations/Spanish (Spain).png
    .png
  • todolist_exe/Resources/Translations/Vietnamese (Vietnam).csv
  • todolist_exe/Resources/Translations/Vietnamese (Vietnam).png
    .png
  • todolist_exe/Resources/Translations/YourLanguage.WordCloud.Ignore.txt
  • todolist_exe/Resources/Translations/YourLanguage.csv
  • todolist_exe/RichEditExtensions.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/Rtf2HtmlBridge.dll
    .dll windows x86

    50723960d25ce6e271646b73c4843b22


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/SpreadsheetContentControlBridge.dll
    .dll windows x86

    1fe50ea8806963f5f51e5721f20cd2bc


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/SpreadsheetContentControlCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/TDLTransEdit.exe
    .exe windows x86

    d1ae6511cbd4649d86bb26d9344d1fb5


    Headers

    Imports

    Sections

  • todolist_exe/TDLUninstall.exe
    .exe windows x86

    30c6ee31b7263784f70530fd50f1ab9f


    Headers

    Imports

    Sections

  • todolist_exe/TDLUpdate.exe
    .exe windows x86

    225f2c967584e1ddf1e2876302e367f4


    Headers

    Imports

    Sections

  • todolist_exe/ToDoList.exe
    .exe windows x86

    858970b1099868511c0640d18d78e173


    Headers

    Imports

    Sections

  • todolist_exe/ToolStripToolTip.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/TransText.dll
    .dll windows x86

    f4f271f304a23843017a1e955f1b72e0


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/UIComponents.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/WebBrowserEx.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/WordCloudUIExtensionBridge.dll
    .dll windows x86

    d59cb0807befe220603cdb116418961f


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/WordCloudUIExtensionCore.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/WorkloadExt.dll
    .dll windows x86

    2ef96b8679bc1e670d0ed587c4bc51ad


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/iCalImportExport.dll
    .dll windows x86

    4ca9710582726e6018229cdebee120f7


    Headers

    Imports

    Exports

    Sections

  • todolist_exe/iTextSharp.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/todolist.exe.xp.manifest
    .xml
  • todolist_exe/unvell.ReoGrid.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • todolist_exe/unvell.ReoGridEditorControl.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections