General

  • Target

    538f5ebed2dfdac6f9cfcc58cd867695

  • Size

    728KB

  • MD5

    538f5ebed2dfdac6f9cfcc58cd867695

  • SHA1

    c16ee130e1fe0d948bd7ebe33845758677b2f23a

  • SHA256

    279c657a7699b769bc812b6a6336a29060dcba8058938dfad76da9a14c4cc0d3

  • SHA512

    a2fcb7847613919a938f5c107d82783f2275a226783ce0d7088f6ffa803eb55458bb9ff45e8b2f5c18e7c8d2842e72cd97b0794f97df862862ad1f350c1cd49d

  • SSDEEP

    12288:/jQW1V2WmL/tUNGQt/6fK9uFO740tyDuf8syPTWcfkWtlLHDL43Sxl5O/g33IA:/jQWfBmL/d4N1ntynV1fjljviax

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 538f5ebed2dfdac6f9cfcc58cd867695
    .rar
  • atrackseraser_trial.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • ATERASER.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ATERASER
  • HELP.CHM
    .chm
  • LICENSE.TXT
  • Plugins/ACDSee 3.X History.ate
  • Plugins/ACDSee 4.0 History.ate
  • Plugins/ACDSee 5.0 History.ate
  • Plugins/AOL 6.0 Temp File.ate
  • Plugins/AOL 7.0 Chat Log.ate
  • Plugins/AOL Instant Messenger.ate
  • Plugins/Acrobat Reader 4 Recent File List.ate
  • Plugins/Acrobat Reader 5 Recent File List.ate
  • Plugins/Acrobat Reader 6 Recent File List.ate
  • Plugins/Avant Browser Last Open Files & Search Keywords.ate
  • Plugins/BearShare Downloaded Files and Temporary Files.ate
  • Plugins/CoffeeCup GIF Animator Recent File List.ate
  • Plugins/CuteFTP Log Files & History.ate
  • Plugins/CuteHTML Recent File List.ate
  • Plugins/Divx Player.ate
  • Plugins/Download Accelerator (DAP).ate
  • Plugins/EditPlus 2 Recent File List.ate
  • Plugins/Excel 2000 Recent File List.ate
  • Plugins/FlashGet Recent Files.ate
  • Plugins/ICQ History Data.ate
  • Plugins/KaZaA Recent File List & Search Keywords.ate
  • Plugins/MS Imaging.ate
  • Plugins/MS Paint.ate
  • Plugins/MS Photo Editor.ate
  • Plugins/Media Jukebox.ate
  • Plugins/NetCaptor Typed URLs and Last Open Files.ate
  • Plugins/Netscape Mail.ate
  • Plugins/Office 2000 Recent File List.ate
  • Plugins/Office 97 Recent File List.ate
  • Plugins/Office XP Recent File List.ate
  • Plugins/Opera 7 Cache & History Data.ate
  • Plugins/PowerDVD PlayList.ate
  • Plugins/PowerZip Recent File List.ate
  • Plugins/RealOne Player Recent Files.ate
  • Plugins/Realplayer Recent Files.ate
  • Plugins/Sonique Playlist and PlayURLs.ate
  • Plugins/Trillian Log Files & Cache Files.ate
  • Plugins/Ulead PhotoImpact 6.0 Recent File List.ate
  • Plugins/Ulead PhotoImpact 7.0 Recent File List.ate
  • Plugins/Ulead PhotoImpact 8.0 Recent File List.ate
  • Plugins/UltraEdit Recent File List.ate
  • Plugins/WinAce Recent File List.ate
  • Plugins/WinRAR Recent File List.ate
  • Plugins/WinZip Recent File List.ate
  • Plugins/Windows Media Player.ate
  • Plugins/Word Pad Recent File List.ate
  • Plugins/Yahoo! Messenger History.ate
  • Plugins/ZipMagic Recent File List.ate
  • Plugins/Zone Alarm Log File.ate
  • Plugins/iMesh Downloaded Files and Playlist.ate
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    18bc6fa81e19f21156316b1ae696ed6b


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • atecore.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url