General

  • Target

    549f038e90105d5238c07eb376c40439.bin

  • Size

    1.1MB

  • MD5

    549f038e90105d5238c07eb376c40439

  • SHA1

    d27a4b1473811d7b690c197193b8a56f1755dcd3

  • SHA256

    40d99771ff36ac8aa94c27f8765df1890683a10db543b8ce9921e8f3df894aaa

  • SHA512

    b8767cbc2eeb799acd9e44bc78b85de08c5199c003ccaa437a71c3ba282358a63b3a2fc95766be82898fadde60d50befefeb7662642ac0094f239047253962f8

  • SSDEEP

    24576:XUMpbqDpTu9uU/3Gvb9Rytmfi04Ofn9qyi/V5NtI/FdsorD2:EYn/WJjfi04OfnEySVbtI9uorq

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 549f038e90105d5238c07eb376c40439.bin
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INSTALLOPTIONS.DLL
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/STARTMENU.DLL
    .dll windows:4 windows x86 arch:x86

    7d85f9c30f9e87a65fff848de2c96ac1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/Fox-Temp/IEHELPER.EXE
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • Help.CHM
    .chm
  • ScreenShot1.JPG
    .jpg
  • TFU.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • TFU.URL
  • Turbo ZIP Cracker.URL
  • UnInst.EXE
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • ĺүƷRSS.URL
  • ں.TXT
  • .TXT
  • ⷴ.URL
  • үƷб.URL