Overview

overview

7

Static

static

3

5642b76b7d...9a.exe

windows7-x64

7

5642b76b7d...9a.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$SMPROGRAM...��.lnk

windows7-x64

3

$SMPROGRAM...��.lnk

windows10-2004-x64

1

Msvbvm50.dll

windows7-x64

1

Msvbvm50.dll

windows10-2004-x64

1

Pk32.exe

windows7-x64

6

Pk32.exe

windows10-2004-x64

6

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

�...��.lnk

windows7-x64

3

�...��.lnk

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5642b76b7d55c4b3f31aab481c29c29a

  • Size

    6.0MB

  • MD5

    5642b76b7d55c4b3f31aab481c29c29a

  • SHA1

    312b266446e25267ee961c365d5d2d3891852983

  • SHA256

    3d42a3b79ed739f217a357b8c797e982752148495e11192e0cebdde5a9da244a

  • SHA512

    dfba0b3560de5e3f457e052cb567d01f18178eee97c131c4d61689087f2fd4b372b8920868cbe3b6c6427a650631ba60a6cafa9ad68dfc2cba41e6001b190644

  • SSDEEP

    98304:Zp7Dz9KWOgYZAY0rVR0dDRLo5ggCNHwfbgYuvbDHQm8zI59usyUJdT/:R8XCRR0dDRekifbgYuvbDHN849usyUJh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 5642b76b7d55c4b3f31aab481c29c29a
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SMPROGRAMS/˿Ϸ/.lnk
    .lnk
  • Msvbvm50.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0615e9c25da62e90a31fe72638c8f4fb


    Headers

    Imports

    Exports

    Sections

  • Pk32.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • Pk32.ini
  • Pk32Reg.ini
  • Readme.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • .lnk
    .lnk