Overview

overview

3

Static

static

3

AddIns/AddAccel.dll

windows7-x64

1

AddIns/AddAccel.dll

windows10-2004-x64

1

AddIns/AddinMana.dll

windows7-x64

1

AddIns/AddinMana.dll

windows10-2004-x64

1

AddIns/AdvEdit.dll

windows7-x64

1

AddIns/AdvEdit.dll

windows10-2004-x64

1

AddIns/AlexMenu.dll

windows7-x64

1

AddIns/AlexMenu.dll

windows10-2004-x64

1

AddIns/AsmVars.dll

windows7-x64

1

AddIns/AsmVars.dll

windows10-2004-x64

1

AddIns/Asm...rs.exe

windows7-x64

1

AddIns/Asm...rs.exe

windows10-2004-x64

1

AddIns/Aut...ct.dll

windows7-x64

1

AddIns/Aut...ct.dll

windows10-2004-x64

1

AddIns/Bitmask.dll

windows7-x64

1

AddIns/Bitmask.dll

windows10-2004-x64

1

AddIns/Cod...es.dll

windows7-x64

1

AddIns/Cod...es.dll

windows10-2004-x64

1

AddIns/Collapse.dll

windows7-x64

1

AddIns/Collapse.dll

windows10-2004-x64

1

AddIns/Colref.dll

windows7-x64

1

AddIns/Colref.dll

windows10-2004-x64

1

AddIns/CppParse.dll

windows7-x64

1

AddIns/CppParse.dll

windows10-2004-x64

1

AddIns/Cre...ct.dll

windows7-x64

1

AddIns/Cre...ct.dll

windows10-2004-x64

1

AddIns/Cre...to.dll

windows7-x64

1

AddIns/Cre...to.dll

windows10-2004-x64

1

AddIns/Cre...Ex.dll

windows7-x64

1

AddIns/Cre...Ex.dll

windows10-2004-x64

1

AddIns/CtrlNames.dll

windows7-x64

1

AddIns/CtrlNames.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e66589b33b8b806f44d6f4f44e7c581

  • Size

    672KB

  • MD5

    0e66589b33b8b806f44d6f4f44e7c581

  • SHA1

    af83466fb58eccdc6465f00f7c64b4b915f19e57

  • SHA256

    efdf0fd5dae404d0fe378fccefeb25414ec090cf795b23096c03a2d7437f39af

  • SHA512

    3bb31e9d5af227a91479ab073d6bb3c449883f1a6706c80a82c52c51b9e5c4805a7344394da2f80e1cd5755d87e900f9d00bd622d9d0f182729a461fe64e3858

  • SSDEEP

    12288:kb7pxbtmYN2l3cJzpFLutBx4eeFpPAWIIp793irr3U2e2LEZrrE8+b:YxZmYN2QzpFiiLPHtp3o3zLES7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 61 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e66589b33b8b806f44d6f4f44e7c581
    .rar
  • AddIns/AddAccel.dll
    .dll windows:4 windows x86 arch:x86

    a557ee3bbf97d4c0e4c6a6477c8f07cc


    Headers

    Imports

    Exports

    Sections

  • AddIns/AddinMana.dll
    .dll windows:4 windows x86 arch:x86

    3e61f5eef3ea3488195f37936c1660b3


    Headers

    Imports

    Exports

    Sections

  • AddIns/AdvEdit.dll
    .dll windows:4 windows x86 arch:x86

    f3c10dfa8c241f9c56fb4bd0d454ff6e


    Headers

    Imports

    Exports

    Sections

  • AddIns/AlexMenu.dll
    .dll windows:4 windows x86 arch:x86

    29d0a6af64ab7d9cdd6f72cbd8e5d931


    Headers

    Imports

    Exports

    Sections

  • AddIns/AsmVars.dll
    .dll windows:4 windows x86 arch:x86

    48dbc6370ab1a1f7d9edc2af813d8083


    Headers

    Imports

    Exports

    Sections

  • AddIns/AsmVars/asmvars.exe
    .exe windows:4 windows x86 arch:x86

    3958ecf34b03f91b3984fcb9b307acf9


    Headers

    Imports

    Sections

  • AddIns/AsmVars/asmvars.txt
  • AddIns/AutoCorrect.dll
    .dll windows:4 windows x86 arch:x86

    1f6cc3179210903db701ab975ed4f602


    Headers

    Imports

    Exports

    Sections

  • AddIns/Bitmask.dll
    .dll windows:4 windows x86 arch:x86

    4a1a688e1df073d9ddfc46fc338f1e3a


    Headers

    Imports

    Exports

    Sections

  • AddIns/CodeTemplates.dll
    .dll windows:4 windows x86 arch:x86

    e9a4bd09a48ef4e030a0a95d760b0b70


    Headers

    Imports

    Exports

    Sections

  • AddIns/Collapse.dll
    .dll windows:4 windows x86 arch:x86

    c2b872eb20df1aaf77f329e14f711711


    Headers

    Imports

    Exports

    Sections

  • AddIns/Colref.dll
    .dll windows:4 windows x86 arch:x86

    91e2ae0e37543f5f83b56797c54f3475


    Headers

    Imports

    Exports

    Sections

  • AddIns/CppParse.dll
    .dll windows:4 windows x86 arch:x86

    a79aa79a14970acd0f267390856b79eb


    Headers

    Imports

    Exports

    Sections

  • AddIns/CreateProject.dll
    .dll windows:4 windows x86 arch:x86

    0aca004814785db201d0426db3bb02bc


    Headers

    Imports

    Exports

    Sections

  • AddIns/CreateProto.dll
    .dll windows:4 windows x86 arch:x86

    bae47f9db742e15fd0b147444ea4c58d


    Headers

    Imports

    Exports

    Sections

  • AddIns/CreateProtoEx.dll
    .dll windows:4 windows x86 arch:x86

    2f6a4ddce8d0ed6826808798a2da8cdf


    Headers

    Imports

    Exports

    Sections

  • AddIns/CtrlNames.dll
    .dll windows:4 windows x86 arch:x86

    48b27585b9c1fc8ccf6f9b8d9232a256


    Headers

    Imports

    Exports

    Sections

  • AddIns/DialogPreview.dll
    .dll windows:4 windows x86 arch:x86

    32af2d0f582da0e2341fb4ed15b2fe32


    Headers

    Imports

    Exports

    Sections

  • AddIns/DlgToWin.dll
    .dll windows:4 windows x86 arch:x86

    c7282e0a7a9e92a0e5805af8bc4a666c


    Headers

    Imports

    Exports

    Sections

  • AddIns/DragProp.dll
    .dll windows:4 windows x86 arch:x86

    cbb10f661ef92d540cd75939d0ceeb20


    Headers

    Imports

    Exports

    Sections

  • AddIns/FlipCase.dll
    .dll windows:4 windows x86 arch:x86

    1f1ddc45610ed418f9646a1f402d1637


    Headers

    Imports

    Exports

    Sections

  • AddIns/FontBuilder.dll
    .dll windows:4 windows x86 arch:x86

    da53cf6f33334e52f3130230895e6fdd


    Headers

    Imports

    Exports

    Sections

  • AddIns/GoAsm.kwl
  • AddIns/Help/AddAccel.Txt
  • AddIns/Help/AddManifest.txt
  • AddIns/Help/AddinMana.Txt
  • AddIns/Help/AdvEdit.Txt
  • AddIns/Help/AsmVars.txt
  • AddIns/Help/AutoCorrect.Txt
  • AddIns/Help/CodeTemplates.Txt
  • AddIns/Help/Collapse.Txt
  • AddIns/Help/Colref.Txt
  • AddIns/Help/ComTool.chm
    .chm
  • AddIns/Help/CreateProject.Txt
  • AddIns/Help/CreateProto.Txt
  • AddIns/Help/CreateProtoEx.Txt
  • AddIns/Help/CtrlNames.Txt
  • AddIns/Help/DlgToWin.txt
  • AddIns/Help/InsertColor.txt
  • AddIns/Help/NSISScriptEditor.Txt
  • AddIns/Help/PB2.txt
  • AddIns/Help/Preview.Txt
  • AddIns/Help/ProjectTimer.txt
  • AddIns/Help/ProjectZip.Txt
  • AddIns/Help/PthExpl++.txt
  • AddIns/Help/RADToolBar.Txt
  • AddIns/Help/RadHelp.Txt
  • AddIns/Help/ReallyRad.txt
  • AddIns/Help/SourceSafe.Txt
  • AddIns/Help/Tabaddin.chm
    .chm
  • AddIns/Help/TxtLnkMan.txt
  • AddIns/Help/Version-Inc.Txt
  • AddIns/Help/VersionControl.txt
  • AddIns/Help/WinErr.txt
  • AddIns/InsertColor.dll
    .dll windows:4 windows x86 arch:x86

    753c6b99510262c5061874585c097c21


    Headers

    Imports

    Exports

    Sections

  • AddIns/MakeDef.dll
    .dll windows:4 windows x86 arch:x86

    45498e4647d0e50b646dbb8aa40a4ece


    Headers

    Imports

    Exports

    Sections

  • AddIns/NSISScriptEditor.dll
    .dll windows:4 windows x86 arch:x86

    694139f9d573927e93f3d3ee4ff86662


    Headers

    Imports

    Exports

    Sections

  • AddIns/NoteTools.dll
    .dll windows:4 windows x86 arch:x86

    b4e59a84e10fe7a6dca6bb3c274ce48e


    Headers

    Imports

    Exports

    Sections

  • AddIns/Preview.dll
    .dll windows:4 windows x86 arch:x86

    db02070c9115cb69f731613f72fed2af


    Headers

    Imports

    Exports

    Sections

  • AddIns/ProcDump.dll
    .dll windows:4 windows x86 arch:x86

    f7a4264b12ef8f5d9b98a66153c9abd4


    Headers

    Imports

    Exports

    Sections

  • AddIns/ProjectTimer.dll
    .dll windows:4 windows x86 arch:x86

    3b097d12fab6a0857dcd89fe332cdf15


    Headers

    Imports

    Exports

    Sections

  • AddIns/ProjectZip.dll
    .dll windows:4 windows x86 arch:x86

    ae8b5731dc301cf56c819683e3dd0709


    Headers

    Imports

    Exports

    Sections

  • AddIns/PthExpl++.dll
    .dll windows:4 windows x86 arch:x86

    d2d4eef1a668492e2f92586208db7bc9


    Headers

    Imports

    Exports

    Sections

  • AddIns/RADToolBar.dll
    .dll windows:4 windows x86 arch:x86

    2674bece2d025b6a52cfac19b0f2a245


    Headers

    Imports

    Exports

    Sections

  • AddIns/RADbg.dll
    .dll windows:4 windows x86 arch:x86

    ca12f2b905a5086e4798818c08f0383b


    Headers

    Imports

    Exports

    Sections

  • AddIns/RES2DLG.DLL
    .dll windows:4 windows x86 arch:x86

    c327aae6308947b53b886c4e548f4e63


    Headers

    Imports

    Exports

    Sections

  • AddIns/RadFavs.dll
    .dll windows:4 windows x86 arch:x86

    dcaef57adb8f6f63aebf3199e6c4722b


    Headers

    Imports

    Exports

    Sections

  • AddIns/RadHelp.dll
    .dll windows:4 windows x86 arch:x86

    ac11c571526066b35c55640a3b104352


    Headers

    Imports

    Exports

    Sections

  • AddIns/ReallyRad.dll
    .dll windows:4 windows x86 arch:x86

    adb921bd5b25b932db19173361ac3b09


    Headers

    Imports

    Exports

    Sections

  • AddIns/SourceSafe.dll
    .dll windows:4 windows x86 arch:x86

    a5524f0126675c4214eea04c2f78c0bf


    Headers

    Imports

    Exports

    Sections

  • AddIns/TabAddin.dll
    .dll windows:4 windows x86 arch:x86

    1d13e5e3bf6efb97a3e34e0a8a30a06b


    Headers

    Imports

    Exports

    Sections

  • AddIns/TbrCreate.exe
    .exe windows:4 windows x86 arch:x86

    766a0ac74f3d2102df4e930d0f68d244


    Headers

    Imports

    Sections

  • AddIns/TxtLnkMan.dll
    .dll windows:4 windows x86 arch:x86

    86b27316ed5850ac29ba3e77f167da56


    Headers

    Imports

    Exports

    Sections

  • AddIns/Version-Inc.dll
    .dll windows:4 windows x86 arch:x86

    30f7296e3fa1b56191f7782f6c5f7af8


    Headers

    Imports

    Exports

    Sections

  • AddIns/VersionControl.dll
    .dll windows:4 windows x86 arch:x86

    12a50ba9e96624b7be095a7f13e946e0


    Headers

    Imports

    Exports

    Sections

  • AddIns/WinErr.Ini
  • AddIns/WinErr.dll
    .dll windows:4 windows x86 arch:x86

    42e75cb119d50538d30f49c3d2f56582


    Headers

    Imports

    Exports

    Sections

  • AddIns/asciiTab.dll
    .dll windows:4 windows x86 arch:x86

    695b608e32bf5328112960329e217c6d


    Headers

    Imports

    Exports

    Sections

  • AddIns/asciiTab.emf
  • AddIns/e-help.dll
    .dll windows:4 windows x86 arch:x86

    b0a862c4ec1b0d90612c4ab6c6570a78


    Headers

    Imports

    Exports

    Sections

  • AddIns/fpu.kwl
  • AddIns/hlpEA5.tmp
  • AddIns/lancome.ini
  • AddIns/luha.bmp
  • AddIns/masm.ct
  • AddIns/masm.kwl
  • AddIns/platsdk.dll
    .dll windows:4 windows x86 arch:x86

    5775204f5a39a607691b1cf5ab1b04ab


    Headers

    Imports

    Exports

    Sections

  • AddIns/raASCII.dll
    .dll windows:4 windows x86 arch:x86

    ceae0c7f6c45dc90fd6b3404fe7510c6


    Headers

    Imports

    Exports

    Sections

  • AddIns/raBitMask.dll
    .dll windows:4 windows x86 arch:x86

    d98bb556c08cb9fef544abdc6bc61ded


    Headers

    Imports

    Exports

    Sections

  • AddIns/raGColor.dll
    .dll windows:4 windows x86 arch:x86

    5c04cd1911f0f3a6cf83b1c392401465


    Headers

    Imports

    Exports

    Sections

  • AddIns/style-manager.dll
    .dll windows:4 windows x86 arch:x86

    7bce9bd1ca2e649a2d643bbf2b9419f3


    Headers

    Imports

    Exports

    Sections

  • AddIns/tasm.ct
  • AddIns/winapi.kwl
    .vbs
  • AddIns/x86.kwl
  • AddIns/下载说明.htm
    .html .js polyglot
  • HL.dll
    .dll windows:4 windows x86 arch:x86

    06b9d683aeb010da6e365bb719899c62


    Headers

    Imports

    Exports

    Sections

  • Help/RadASMini.rtf
    .rtf
  • Help/dbgwin.hlp
  • Help/下载说明.htm
    .html .js polyglot
  • Html/Macro/center.kbm
  • Html/Macro/image.kbm
  • Html/Macro/italic.kbm
  • Html/Macro/strong.kbm
  • Html/Macro/underline.kbm
  • Html/下载说明.htm
    .html .js polyglot
  • RACad.dll
    .dll windows:4 windows x86 arch:x86

    196cc249074e61e00e5c68d3f98a3869


    Headers

    Imports

    Exports

    Sections

  • RACodeComplete.dll
    .dll windows:4 windows x86 arch:x86

    e1570c9b554eef95495afd475fbe5fcb


    Headers

    Imports

    Exports

    Sections

  • RAEdit.dll
    .dll windows:4 windows x86 arch:x86

    f34d6ae9ecfdffa1418edf6e243fc46e


    Headers

    Imports

    Exports

    Sections

  • RAFile.dll
    .dll windows:4 windows x86 arch:x86

    833b39b07d321eb70c4486b53b2042dd


    Headers

    Imports

    Exports

    Sections

  • RAGrid.dll
    .dll windows:4 windows x86 arch:x86

    3305ad1533263b66a65e5b298d94a4e0


    Headers

    Imports

    Exports

    Sections

  • RAHexEd.dll
    .dll windows:4 windows x86 arch:x86

    96892e88297b01b94f94ce1e5a93bf7e


    Headers

    Imports

    Exports

    Sections

  • RaGraph.dll
    .dll windows:4 windows x86 arch:x86

    8288d5b8cb18559a8fc72d0c70982a4b


    Headers

    Imports

    Exports

    Sections

  • RadASM.exe
    .exe windows:4 windows x86 arch:x86

    db3d7ddf4990e8c456aefe1185ce97f9


    Headers

    Imports

    Sections

  • RadASM.ini
  • SprSht.dll
    .dll windows:4 windows x86 arch:x86

    4e594b983c2337ab5957e17b80446038


    Headers

    Imports

    Exports

    Sections

  • WBDll.dll
    .dll windows:4 windows x86 arch:x86

    39165a1f3e25d5955511e3364092d7f4


    Headers

    Imports

    Exports

    Sections

  • WhatsNew.txt
  • html.ini
    .ps1
  • 下载说明.htm
    .html .js polyglot