Overview

overview

7

Static

static

3

BitsumPECo...up.exe

windows7-x64

7

BitsumPECo...up.exe

windows10-2004-x64

7

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

9xl.bat

windows7-x64

1

9xl.bat

windows10-2004-x64

1

PEC2.chm

windows7-x64

1

PEC2.chm

windows10-2004-x64

1

PEC2.exe

windows7-x64

1

PEC2.exe

windows10-2004-x64

1

PEChksum.exe

windows7-x64

1

PEChksum.exe

windows10-2004-x64

1

PEHideText.exe

windows7-x64

1

PEHideText.exe

windows10-2004-x64

1

PEInsert.exe

windows7-x64

1

PEInsert.exe

windows10-2004-x64

1

PESubsys.exe

windows7-x64

1

PESubsys.exe

windows10-2004-x64

1

PETrim.exe

windows7-x64

1

PETrim.exe

windows10-2004-x64

1

PEWaterMark.exe

windows7-x64

1

PEWaterMark.exe

windows10-2004-x64

1

PurchaseDialog.dll

windows7-x64

1

PurchaseDialog.dll

windows10-2004-x64

3

UpdateChecker.dll

windows7-x64

1

UpdateChecker.dll

windows10-2004-x64

3

bmstrstr.dll

windows7-x64

3

bmstrstr.dll

windows10-2004-x64

3

cs_cpl.dll

windows7-x64

3

cs_cpl.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7ad3b70ece91caf2ca15da03b1ef0a9b

  • Size

    938KB

  • MD5

    7ad3b70ece91caf2ca15da03b1ef0a9b

  • SHA1

    8f7f0fe9c4c03e94c834ae1b71c7928c50211ba8

  • SHA256

    3b1115be91e9953164e6da606c4717f769bba75c04179ee4726b50f9ec3cc6aa

  • SHA512

    464eb4e174fdb67c7a84691c0e64ef993e8a66ea57691305b4df090803b57691ea0a1481daa85a0255f9091461f2e41f8bb910fca727d547757a76e120a578ec

  • SSDEEP

    24576:Z5Tp2gKLt8PuHBGiYHL7Gbx5yYoHENIHZjf+O8q:Pd2Tx82HBQ/y7oHENVO8q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 59 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • 7ad3b70ece91caf2ca15da03b1ef0a9b
    .rar
  • BitsumPECompact-v2.82.2/pec2setup.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    741b6bafe355b63a372d737b30543a95


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/spltmp.bmp
  • 9xl.bat
  • PEC2.CHM
    .chm
  • PEC2.exe
    .exe windows:5 windows x86 arch:x86

    32638c28a2e9708afc54da9f132509a5


    Headers

    Imports

    Sections

  • PEChksum.exe
    .exe windows:5 windows x86 arch:x86

    1ef71c7db737fcf01344ada9fad4f143


    Headers

    Imports

    Sections

  • PEHT.h
  • PEHTLib.lib
  • PEHideText.exe
    .exe windows:5 windows x86 arch:x86

    e7d7346f8f08b76c0e2b8ca4f9564d1b


    Headers

    Imports

    Exports

    Sections

  • PEInsert.exe
    .exe windows:5 windows x86 arch:x86

    f083021c45e00e07b758bbef707d9b7e


    Headers

    Imports

    Sections

  • PESubsys.exe
    .exe windows:5 windows x86 arch:x86

    1ef71c7db737fcf01344ada9fad4f143


    Headers

    Imports

    Sections

  • PETrim.exe
    .exe windows:5 windows x86 arch:x86

    1a16ec2d7530af6104247f536cbda582


    Headers

    Imports

    Sections

  • PEWaterMark.exe
    .exe windows:5 windows x86 arch:x86

    490e9646a608b6a2d893a8b112652912


    Headers

    Imports

    Sections

  • PurchaseDialog.dll
    .dll windows:5 windows x86 arch:x86

    8da0183ae386376479d570b0d33b2b19


    Headers

    Imports

    Exports

    Sections

  • UpdateChecker.dll
    .dll windows:5 windows x86 arch:x86

    77fcfb1f6cf97ebe281f2292ed4203f1


    Headers

    Imports

    Exports

    Sections

  • bmstrstr.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • cs_cpl.dll
    .dll windows:5 windows x86 arch:x86

    8240ca658c24201845a82f927477a199


    Headers

    Imports

    Exports

    Sections

  • localizable resources/bitmap1.bmp
  • localizable resources/installer_strings.txt
  • localizable resources/packedby_small3.bmp
  • localizable resources/pec2.ico
  • localizable resources/pec2rsrc.rc
  • localizable resources/resource.h
  • localizable resources/update checker/strings.rc
  • lzma.exe
    .exe windows:4 windows x86 arch:x86

    7172c0c567e5445003be7b3bd3a52b27


    Headers

    Imports

    Sections

  • pec2codec_aplib.dll
    .dll windows:4 windows x86 arch:x86

    cf133e1997971d8062f9bfd4fc44935c


    Headers

    Imports

    Exports

    Sections

  • pec2codec_brieflz.dll
    .dll windows:4 windows x86 arch:x86

    4a6a83cc422c6f8bc873ef4218b5c023


    Headers

    Imports

    Exports

    Sections

  • pec2codec_copy.dll
    .dll windows:4 windows x86 arch:x86

    db46c8ced858ea768b5397c51f0629c3


    Headers

    Imports

    Exports

    Sections

  • pec2codec_crc32.dll
    .dll windows:4 windows x86 arch:x86

    db46c8ced858ea768b5397c51f0629c3


    Headers

    Imports

    Exports

    Sections

  • pec2codec_ffce.dll
    .dll windows:4 windows x86 arch:x86

    4a6a83cc422c6f8bc873ef4218b5c023


    Headers

    Imports

    Exports

    Sections

  • pec2codec_inv.dll
    .dll windows:5 windows x86 arch:x86

    5306966d556ca4123d46e107c55a8f5e


    Headers

    Imports

    Exports

    Sections

  • pec2codec_jcalg1.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Exports

    Sections

  • pec2codec_lzma.dll
    .dll windows:4 windows x86 arch:x86

    c586ef6d782cd24e07987e632418322e


    Headers

    Imports

    Exports

    Sections

  • pec2codec_lzma2.dll
    .dll windows:5 windows x86 arch:x86

    a10741248b2bd7c724a037ee2e392182


    Headers

    Imports

    Exports

    Sections

  • pec2codec_messagebox.dll
    .dll windows:4 windows x86 arch:x86

    7505654618f822b2448c2311abcc51f5


    Headers

    Imports

    Exports

    Sections

  • pec2codec_password.dll
    .dll windows:4 windows x86 arch:x86

    5f254d925cfd150944b3d21c446fb307


    Headers

    Imports

    Exports

    Sections

  • pec2gui.exe
    .exe windows:5 windows x86 arch:x86

    2ccce8d5ae0f8183a8f5f04b4f2fcb03


    Headers

    Imports

    Sections

  • pec2hooks/miscdef.inc
  • pec2hooks/pec2hooks.h
  • pec2hooks/pec2hooks.inc
  • pec2hooks/pec2hooks_fastimport/ReadMe.txt
  • pec2hooks/pec2hooks_fastimport/fastimport.asm
  • pec2hooks/pec2hooks_fastimport/fastimport.obj
  • pec2hooks/pec2hooks_fastimport/miscdef.inc
  • pec2hooks/pec2hooks_fastimport/pec2hooks_fastimport.cpp
  • pec2hooks/pec2hooks_fastimport/pec2hooks_fastimport.def
  • pec2hooks/pec2hooks_fastimport/pec2hooks_fastimport.h
  • pec2hooks/pec2hooks_fastimport/pec2hooks_fastimport.vcproj
    .xml
  • pec2hooks/pec2hooks_fastimport/stdafx.cpp
  • pec2hooks/pec2hooks_fastimport/stdafx.h
  • pec2hooks_api_ispacked.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Exports

    Sections

  • pec2hooks_api_watermark.dll
    .dll windows:5 windows x86 arch:x86

    55d5aaeefc6112652771d614145be977


    Headers

    Imports

    Exports

    Sections

  • pec2hooks_fastimport.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Exports

    Sections

  • pec2ldr_default.dll
    .dll windows:5 windows x86 arch:x86

    db052a05bb0a133e99379938ff773169


    Headers

    Imports

    Exports

    Sections

  • pec2ldr_reduced.dll
    .dll windows:5 windows x86 arch:x86

    d0b0ab81bf0e4cd20070f6525db9fd67


    Headers

    Imports

    Exports

    Sections

  • pec2rsrc.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_brazilian.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • pec2rsrc_chinese.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_chinese_tr.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • pec2rsrc_dutch.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_french.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_german.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_italian.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_japanese.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • pec2rsrc_korean.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_polish.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • pec2rsrc_russian.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_slovenian.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • pec2rsrc_swedish.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • peclassify.exe
    .exe windows:5 windows x86 arch:x86

    9233069eed22a0696158b112135942cb


    Headers

    Imports

    Sections

  • sdk/codec/PEC2CodecSDK.h
  • sdk/codec/inv_codec_src/pec2codec_inv.cpp
  • sdk/codec/inv_codec_src/pec2codec_inv.def
  • sdk/codec/inv_codec_src/pec2codec_inv.h
  • sdk/codec/inv_codec_src/pec2codec_inv.vcproj
    .xml
  • sdk/codec/inv_codec_src/stdafx.cpp
  • sdk/codec/inv_codec_src/stdafx.h
  • sdk/codec/template/Codec_0_EntryPoints.asm
  • sdk/codec/template/Codec_0_EntryPoints.cpp
  • sdk/codec/template/Codec_0_EntryPoints.h
  • sdk/codec/template/Codec_0_EntryPoints.inc
  • sdk/codec/template/pec2codec_template.def
  • sdk/codec/template/pec2codec_template.h
  • sdk/codec/template/pec2codec_template.vcproj
    .xml
  • sdk/codec/template/pec2codec_template_host.cpp
  • sdk/codec/template/stdafx.h
  • testcodec.exe
    .exe windows:5 windows x86 arch:x86

    a93e69d60b0a6426a781eee6811a3b61


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • updatechecker_chinesegb.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • updatechecker_dutch.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • updatechecker_english.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • updatechecker_german.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • updatechecker_korean.dll
    .dll windows:5 windows x86 arch:x86

    d056332cf3b8d6b9c5dfda1fdbccf8ca


    Headers

    Imports

    Sections

  • updatechecker_polish.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • updatechecker_russian.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • updatechecker_slovenian.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • updatechecker_swedish.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • BitsumPECompact-v2.82.2/新云软件.url
    .url