Overview

overview

7

Static

static

3

74484e7ed6...23.exe

windows7-x64

7

74484e7ed6...23.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

Click.dll

windows7-x64

1

Click.dll

windows10-2004-x64

1

ExtMenu.dll

windows7-x64

1

ExtMenu.dll

windows10-2004-x64

1

Proxy.dll

windows7-x64

1

Proxy.dll

windows10-2004-x64

1

Qidasoft.dll

windows7-x64

1

Qidasoft.dll

windows10-2004-x64

1

RegEx.dll

windows7-x64

1

RegEx.dll

windows10-2004-x64

1

Sck.exe

windows7-x64

1

Sck.exe

windows10-2004-x64

1

Task.dll

windows7-x64

Task.dll

windows10-2004-x64

1

Tool.dll

windows7-x64

1

Tool.dll

windows10-2004-x64

1

com.dll

windows7-x64

3

com.dll

windows10-2004-x64

3

dp1.dll

windows7-x64

1

dp1.dll

windows10-2004-x64

3

iext.dll

windows7-x64

1

iext.dll

windows10-2004-x64

1

iext2.dll

windows7-x64

1

iext2.dll

windows10-2004-x64

1

krnln.dll

windows7-x64

1

krnln.dll

windows10-2004-x64

1

ons.dll

windows7-x64

1

ons.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    74484e7ed61ff0b152da9b161da1ec23

  • Size

    4.3MB

  • MD5

    74484e7ed61ff0b152da9b161da1ec23

  • SHA1

    6042d0ba3aae4f7d315bdef9c8e16fda1084b392

  • SHA256

    7b97e9b9308471343e7ffa70dc8cd03afaec401870be1bb7991a59d0a65f9cc3

  • SHA512

    11db3a8b2d2c6cb9ae41422dec84ec618e88e428bdf32fe9875eb1d9107555654797db3c361ace122d35d5854dcd1ce8370066f5b650f628f0d425f69bd6947f

  • SSDEEP

    98304:0lvTSA3jb1w5v3uS0fZV4H2mYY0JNzSpuCYHwhfwuj1dY:0pjb9SDoJJShwuo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 74484e7ed61ff0b152da9b161da1ec23
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Click.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • ExtMenu.fnr
    .dll windows:4 windows x86 arch:x86

    472b95d04dba8e53958d2b826a76dce5


    Headers

    Imports

    Exports

    Sections

  • License.txt
  • Proxy.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • Proxy/Proxy.txt
  • Proxy/QQWry.DAT
  • Proxy/url.dat
  • Qidasoft.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • ReadMe.txt
  • RegEx.fnr
    .dll windows:4 windows x86 arch:x86

    17065b5c253ba1d2ebb061964e090d5e


    Headers

    Imports

    Exports

    Sections

  • Sck.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • Task.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • Tool.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • WhatsNew.txt
  • com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • dp1.fne
    .dll windows:4 windows x86 arch:x86

    a198616942b79e67d7da4241ca14ebce


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    26785cfb88e49b3769998dfe0b2db937


    Headers

    Imports

    Exports

    Sections

  • ons.dll
    .dll windows:4 windows x86 arch:x86

    8635d674d6983c0b686dc6eba7566cea


    Headers

    Imports

    Exports

    Sections

  • res/32-1.eil
  • res/32-2.eil
  • res/IE-1.dat
  • res/IE-2.dat
  • res/IE-3.dat
  • res/IE-4.dat
  • res/cd16.eil
  • res/dr.dat
  • res/ds.dat
  • res/dt.dat
    .jpg
  • res/hrw.dat
  • res/proxy.dat
  • res/pz.dat
  • res/qd.dat
    .jpg
  • res/rw16.eil
  • res/sepr.dat
  • res/shua-1.dat
  • res/shua-2.dat
  • res/shua-3.dat
  • res/shua-4.dat
  • res/sz.dat
  • res/tj.dat
  • res/user.dat
  • res/vscm.dat
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • res/xc.eil
  • res/xd.dat
  • res/xg.dat
  • res/xq.eil
  • res/xw.dat
  • res/ztt16.eil
  • shua-IE.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • shua-IH.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • shua.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • szqm.dat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • update.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections