General

  • Target

    7bdc4fdd6bf49774c4b30d01792a971f

  • Size

    2.2MB

  • MD5

    7bdc4fdd6bf49774c4b30d01792a971f

  • SHA1

    ab3da1f1bd51ba72b9285872b60b0cb3809a016b

  • SHA256

    20bcbdf3148a8e29bcf5ab7959a3a137f1c972e1fa8b38daaf61b982b7825c4a

  • SHA512

    195682dbdb7886e72e1d0ff2a863f46af71e844ba7b4ec023211824fd096acc39dfcea85aaf3228ba2c164c52a5fe127a192b5071db1fd196530df11649af1c9

  • SSDEEP

    49152:Yw1bkdEF62K1kixxXexH1KKxrpQpE7vWCTdAD8a+1A++evmV:Yak1PMWqDZM/c5+V

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7bdc4fdd6bf49774c4b30d01792a971f
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $EXEDIR/codmw3.7z
    .7z
  • Documents and Settings/Администратор/Мои документы/Документы сканера/cxsfg.jpg
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $TEMP/A1779532/COMMENT
  • $TEMP/A1779532/COVER
    .7z
  • images/bg1.png
    .png
  • images/bg2.png
    .png
  • images/bg3.png
    .png
  • images/bg4.png
    .png
  • images/bg5.png
    .png
  • images/bramus/percentImage.gif
    .gif
  • images/bramus/percentImage.png
    .png
  • images/bramus/percentImage_back.png
    .png
  • images/help.png
    .png
  • images/icons/add.gif
    .gif
  • images/icons/empty.gif
    .gif
  • images/icons/fill.gif
    .gif
  • images/icons/get.gif
    .gif
  • images/icons/minus.gif
    .gif
  • images/icons/set.gif
    .gif
  • images/img.jpg
    .jpg
  • images/pgl.png
    .png
  • js/bramus/jsProgressBarHandler.js
    .js
  • js/prototype/prototype.js
    .js
  • lic.html
  • page-reg.html
    .html
  • page.html
    .html
  • page2.html
    .html
  • page3.html
    .html
  • page4.html
    .js
  • page5.html
    .html
  • $TEMP/A1779532/CST
  • $TEMP/A1779532/FLIST
  • $TEMP/A1779532/IDV
  • $TEMP/A1779532/INFO
  • $TEMP/A1779532/action1.dll
    .dll windows:5 windows x86 arch:x86

    395b12ee5d5cba0a671dcace60606094


    Headers

    Imports

    Exports

    Sections

  • $TEMP/A1779532/ico.dat
  • $TEMP/A1779532/sfx7.dll
    .dll windows:5 windows x86 arch:x86

    b025e79b2d77b0f41dc4579eec02a14e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/A1779532/zar.dll
    .dll windows:4 windows x86 arch:x86

    3726b8c597bbd6bac65abe3d0400a84f


    Headers

    Imports

    Exports

    Sections

  • C:/Documents and Settings//Local Settings/Temp/Build/COMMENT
  • C:/Documents and Settings//Local Settings/Temp/Build/COVER
    .7z
  • images/bg1.png
    .png
  • images/bg2.png
    .png
  • images/bg3.png
    .png
  • images/bg4.png
    .png
  • images/bg5.png
    .png
  • images/bramus/percentImage.gif
    .gif
  • images/bramus/percentImage.png
    .png
  • images/bramus/percentImage_back.png
    .png
  • images/help.png
    .png
  • images/icons/add.gif
    .gif
  • images/icons/empty.gif
    .gif
  • images/icons/fill.gif
    .gif
  • images/icons/get.gif
    .gif
  • images/icons/minus.gif
    .gif
  • images/icons/set.gif
    .gif
  • images/img.jpg
    .jpg
  • images/pgl.png
    .png
  • js/bramus/jsProgressBarHandler.js
    .js
  • js/prototype/prototype.js
    .js
  • lic.html
  • page-reg.html
    .html
  • page.html
    .html
  • page2.html
    .html
  • page3.html
    .html
  • page4.html
    .js
  • page5.html
    .html
  • C:/Documents and Settings//Local Settings/Temp/Build/FLIST
  • C:/Documents and Settings//Local Settings/Temp/Build/IDV
  • C:/Documents and Settings//Local Settings/Temp/Build/INFO
  • C:/Documents and Settings//Local Settings/Temp/Build/ico.dat
  • C:/Documents and Settings//Local Settings/Temp/Build/ico.ico