Overview

overview

7

Static

static

3

DASInstall...64.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

AutoUpdate...64.exe

windows10-2004-x64

1

CfgSet64.dll

windows10-2004-x64

1

Chart64.dll

windows10-2004-x64

1

DasGuiLib64.dll

windows10-2004-x64

1

DasTrader64.exe

windows10-2004-x64

3

HotKey.pdf

windows10-2004-x64

1

LangPack64.dll

windows10-2004-x64

1

ReleaseNote.html

windows10-2004-x64

1

SkinMagic64.dll

windows10-2004-x64

1

ToolBar64.dll

windows10-2004-x64

1

UpdateClient.exe

windows10-2004-x64

1

XCrashReport.exe

windows10-2004-x64

1

daszip64.dll

windows10-2004-x64

1

mfc140.dll

windows10-2004-x64

1

msvcp140.dll

windows10-2004-x64

1

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows10-2004-x64

3

vcruntime140.dll

windows10-2004-x64

1

vcruntime140_1.dll

windows10-2004-x64

1

zlib1.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    DASInstallIBCO.5.7.8.6_x64.exe

  • Size

    9.8MB

  • MD5

    cacfb0df94cb68e3d510237c5b3e285f

  • SHA1

    730203cfa5a88250cfbd928f586d86fb46da79c0

  • SHA256

    b5d13b82ef2ffb2cb642309bb3760fbfa8922f7b3b0b57b798c0dccf08c26a39

  • SHA512

    75bcbb91e9497ef497993e853dec0e1746e551d3ac2d29d8cf281d114a77155742f948303c59652df2a04ee81170f5ee7a468bb720dfd9b2048f6a57a07d40f2

  • SSDEEP

    196608:HqpRLWFo7sirxauGMQmfefepoAd3dnyXuAVmfCTZu70RH+eeqOpt:KpRLWFxiFauGUfe2p3dyXuk9Tqdt

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • DASInstallIBCO.5.7.8.6_x64.exe
    .exe windows:4 windows x86 arch:x86

    e037327a20e5c7520a608e1a32477275


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_logon.bmp
  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    c0d4e5fadc92d88e6603d2d1c1d8421c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Alert.xml
  • AutoUpdateClient64.exe
    .exe windows:6 windows x64 arch:x64

    ee08f8a701aad4f0a19930221ce90de1


    Code Sign

    Headers

    Imports

    Sections

  • Baskets/BasketLoadBlank.csv
  • Baskets/BasketLoadExample.csv
  • Baskets/LONG_POSTION.csv
  • Baskets/OILPair.csv
  • Baskets/OILPair.txt
  • Baskets/SELL_POSITION.csv
  • Baskets/StopOrderExample.csv
  • Baskets/newstop.csv
  • Baskets/stopTest.csv
  • Baskets/t1.bsk
  • Baskets/t2.bsk
  • Baskets/test.bsk
  • CfgSet64.dll
    .dll windows:6 windows x64 arch:x64

    ca0a77e8b2822e2c3ed8adbb40e57595


    Headers

    Imports

    Exports

    Sections

  • Chart64.dll
    .dll windows:6 windows x64 arch:x64

    f4cb696107d9c1934c38f322e05feec6


    Headers

    Imports

    Exports

    Sections

  • Config.cfg
  • Config.fix
  • ConfigEx.cfg
  • DASInstallIBCO.bmp
  • DASLP.LP
  • DasGuiLib64.dll
    .dll windows:6 windows x64 arch:x64

    53ddfb52eaa73a3a5786cbee9be6bb1c


    Headers

    Imports

    Exports

    Sections

  • DasTrader64.exe
    .exe windows:6 windows x64 arch:x64

    46467464537e9a5d5d74d61b562896d7


    Code Sign

    Headers

    Imports

    Sections

  • HotKey.pdf
    .pdf

    • http://www.nasdaqtrader.com/trader/tradingservices/productservices/productdescriptions/inet/rash_strategy.pdf

    • http://finance.yahoo.com/q/pr?s=%SYMB%

  • Hotkey.htk
  • LangPack64.dll
    .dll windows:6 windows x64 arch:x64

    c75be13b2ab590806451f259c365b3ea


    Headers

    Imports

    Exports

    Sections

  • NASDAQBell.mp3
  • NYSEBell.mp3
  • ReleaseNote.html
  • Report.mdb
  • SkinMagic64.dll
    .dll windows:6 windows x64 arch:x64

    b7f757a94909399cadb3832e0572a532


    Headers

    Imports

    Exports

    Sections

  • ToolBar64.dll
    .dll windows:6 windows x64 arch:x64

    7e386dbc032ee222f17f5713d86ed64d


    Headers

    Imports

    Exports

    Sections

  • UpdateClient.exe
    .exe windows:5 windows x86 arch:x86

    c2d630ac9535b12fcfb621f83b3580a1


    Code Sign

    Headers

    Imports

    Sections

  • XCrashReport.exe
    .exe windows:5 windows x86 arch:x86

    5ebc4301d015683e9a49cc6b2207c7c2


    Code Sign

    Headers

    Imports

    Sections

  • daszip64.dll
    .dll windows:6 windows x64 arch:x64

    74acd152bf4ab7bab54351c065e2cb12


    Headers

    Imports

    Exports

    Sections

  • default.dsk
  • disclaimer.jpg
    .jpg
  • hotkey.xml
    .xml
  • mfc140.dll
    .dll windows:6 windows x64 arch:x64

    79866bf350529b983a801759067cf66d


    Code Sign

    Headers

    Imports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • scanner.xml
    .xml
  • theme/DAS_Blue.bmp
  • theme/DAS_Blue.smf
  • theme/DAS_Blue32.smf
  • theme/DAS_Dark.bmp
  • theme/DAS_Dark.smf
  • theme/DAS_Dark32.smf
  • theme/DAS_Default.bmp
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    e037327a20e5c7520a608e1a32477275


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x64 arch:x64

    f9c717568234c6fdb42a2676a784fe10


    Headers

    Imports

    Exports

    Sections