General

  • Target

    7114e43c7b4b7e74d83f4729b2173ad4

  • Size

    1.2MB

  • MD5

    7114e43c7b4b7e74d83f4729b2173ad4

  • SHA1

    01914b19ab84e7c17bc434beec2599fdb6b911a0

  • SHA256

    332bfd0847514e8f4f9f943bad7d3b35b3915faf662ef11feb7db82fb322e11c

  • SHA512

    3cb21908fb47f23dd4cc4a6f9bfa0b7e324165a400db13b50bfa92a96183b7db007bcb9be1e46e64ba7b4401778458801ca229ae804b23acf03f627f603b1973

  • SSDEEP

    24576:naxL2G41mVI8Pt9UuvsKk/g+aSWjatdbVPQsFrbh87jaRV:nreZUucgRSSMTq7k

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • 7114e43c7b4b7e74d83f4729b2173ad4
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FRNDelete.dll
    .dll windows:4 windows x86 arch:x86

    eacc283400b4c9fd7e2c19bddba71711


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • lineguide_20080630_install.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    fd5ce232e6703cc4ebbce551ac4fd8cc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    ba3891ead2b1916a668d1301763262db


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
  • lineguide.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    39d98a29ab14a6fc0a7bd565e78af4bf


    Headers

    Imports

    Exports

    Sections

  • lineguide.dll.intermediate.manifest
    .xml
  • lineguideup.exe
    .exe windows:4 windows x86 arch:x86

    cda18251fd19e4ddaa6eca62e183fc1a


    Headers

    Imports

    Sections

  • lineguideup.exe.intermediate.manifest
    .xml
  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    2daa984c9cad30e736f52d625c07e4dd


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    da9753a0859a4bcac292d56630cf47ba


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    9f4ddca8eafe383af62c3c9a0d4df294


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • popguide_20080628.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ExistFiles.dll
    .dll windows:4 windows x86 arch:x86

    80686d0ea5c37412830430f56f2823c2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b3d296ff6f7abb1319ee006fcc6c4d98


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    3d91458bc90a151726bcfdaeff902d08


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • MouseHook.dll
    .dll windows:4 windows x86 arch:x86

    bfe8bd7b198564e66f79720ef0e6b8e0


    Headers

    Imports

    Exports

    Sections

  • popguide.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4f470944bac3ff3a8b54608c95e2cb17


    Headers

    Imports

    Exports

    Sections

  • popguideDlg.exe
    .exe windows:4 windows x86 arch:x86

    3e6e8fd61b782c3fa0417c29798423f3


    Headers

    Imports

    Sections

  • popguide_update.exe
    .exe windows:4 windows x86 arch:x86

    071ef5c2217f91a9d34254a8a652eb70


    Headers

    Imports

    Sections