General

  • Target

    5ac4403d28e3a1861be9b714f119252a

  • Size

    1.0MB

  • MD5

    5ac4403d28e3a1861be9b714f119252a

  • SHA1

    2b56abc9006f0eb9023e04103dc9f62c176850b4

  • SHA256

    65db0b2ee251d2849d4875541c44b7a3bd662cbb7ab3d368b203d71c3945f3a3

  • SHA512

    0e3b29a4d54c6b93f11ea05b7a90c4b90c523c3c217693cc4f950082a71320529e52571328c3e66238f3cf5ea60fcbc6f61cde37b10d3c3b1ff679ab77ec04d9

  • SSDEEP

    24576:TpBmxRlEtwg7fBpIhV6o+BYjN1rua9b9ZVjArYz0+hbB7h:TpBmbCf7fSV9Nt3JFw+rh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ac4403d28e3a1861be9b714f119252a
    .zip
  • U1012.exe
    .exe windows:4 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Exports

    Sections

  • wjbutton_en.xpi
    .zip
  • CREDITS
  • LICENSE
  • chrome.manifest
  • chrome/wj.jar
    .zip
  • content/about.xul
    .xml
  • content/contents.rdf
  • content/popup.xul
    .xml
  • content/preferences.js
    .js
  • content/preferences.xul
    .xml
  • content/wj.js
    .js
  • content/wj.xul
    .xml .js polyglot
  • content/wj_tb.xul
    .xml .js polyglot
  • locale/en-US/contents.rdf
    .xml
  • locale/en-US/wj.dtd
  • locale/en-US/wj.properties
  • locale/zh-CN/contents.rdf
    .xml
  • locale/zh-CN/wj.dtd
  • locale/zh-CN/wj.properties
  • skin/Thumbs.db
  • skin/contents.rdf
    .xml
  • skin/wj-16-red.png
    .png
  • skin/wj-16.png
    .png
  • skin/wj-24-red.png
    .png
  • skin/wj-24.png
    .png
  • skin/wj.css
  • skin/wj.png
    .png
  • defaults/preferences/preferences.js
  • install.rdf