General

  • Target

    72cad1a39f4360c700e8e5d6d613e522

  • Size

    3.3MB

  • MD5

    72cad1a39f4360c700e8e5d6d613e522

  • SHA1

    3e19e11744dee653ee1cbebdb267001bb16e576a

  • SHA256

    8f0cb5de721f83aaeed28a3ded7249e35374608d4b88c50be0d69df97a97e594

  • SHA512

    0dcd925d9c17de7ddef36534a2d4cb68b258ac7e959a3a38d3d763050dfd5535bb2c50d1d53daca271900d3af97604b22763a76036ef1bed1ada71081f0130de

  • SSDEEP

    98304:dswPeOQOqiWK1NEppEN+EUWplqzPKLMcYlQCqV:8OQFiWKfEbEAYl2Kf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • 72cad1a39f4360c700e8e5d6d613e522
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections

  • $SYSDIR/Zoe_Saldana_Screensaver.scr
    .exe windows:4 windows x86 arch:x86

    c62e202f7c61f5b0d93e1e66b041122a


    Headers

    Imports

    Sections

  • $TEMP/dospop.exe
    .exe windows:4 windows x86 arch:x86

    81c812ed76d4690c8678b3a4f0737a5f


    Headers

    Imports

    Sections

  • /tbu03344/RSSReader_plugin.dll
    .dll windows:4 windows x86 arch:x86

    3b52a18ae5379d4e489674813f3a5458


    Headers

    Imports

    Exports

    Sections

  • /tbu03344/basis.xml
  • /tbu03344/channel.tmpl
  • /tbu03344/content.tmpl
    .html
  • /tbu03344/dospop.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bcdbdc66bc53b1ee79d77f4040004cdb


    Headers

    Imports

    Exports

    Sections

  • /tbu03344/icons.bmp
  • /tbu03344/logo16.bmp
  • /tbu03344/marquee.tmpl
    .html
  • /tbu03344/options.html
    .html
  • /tbu03344/rss.gif
    .gif
  • /tbu03344/static_img.html
    .html
  • /tbu03344/static_pub.html
    .html
  • /tbu03344/tbhelper.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    801f33c8a45029494e46ec8d40215f59


    Headers

    Imports

    Exports

    Sections

  • /tbu03344/toolbar-logo-dospop.bmp
  • /tbu03344/version.txt
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    773e933db287d0293e61a62d958e00ab


    Headers

    Imports

    Sections