General

  • Target

    7f52ff1889e16768ce4fd0b86cd27569

  • Size

    382KB

  • MD5

    7f52ff1889e16768ce4fd0b86cd27569

  • SHA1

    13abec1b2dd10c8b769392beec531c35ff70ee2e

  • SHA256

    e8adae0c77ea4bcb2265217b3673ac6a7d1fd0563f7a73dd0bb17d5442a6ad25

  • SHA512

    45a8394932917d0452c6dea6631946a26e4ae5537f6aa0541ceb1e2d9d99785045e738d4d8399836a6a101548d42117a835e8e66100e2d8442b7c90f49ac109a

  • SSDEEP

    6144:zTq+P6GslFFS78a50aFt8O+ltTVHQH84SB61AgayMpu286G8fXVRr3CwIrNAHdm+:vR6GaiLFWltFqxMyMpu28d+XVRr3CTrM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7f52ff1889e16768ce4fd0b86cd27569
    .exe windows:4 windows x86 arch:x86

    dfb06052e74b26a42b0e490bd1c07959


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Mozilla/Firefox/Profiles/$1/extensions/{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
    .zip
  • META-INF/WajamsTheUSERTRUSTNetworkID.rsa
  • META-INF/WajamsTheUSERTRUSTNetworkID.sf
  • META-INF/manifest.mf
  • chrome.manifest
  • content/browserLoad.js
    .js
  • content/firefoxOverlay.xul
    .xml
  • content/priam.js
    .js
  • content/priam.png
    .png
  • content/priam_background.js
    .js
  • content/priam_background_firefox.js
    .js
  • content/priam_firefox.js
    .js
  • defaults/preferences/priam_prefs.js
  • install.rdf
    .xml
  • $LOCALAPPDATA/Wajam/Chrome/wajam.crx
    .zip
  • html/background.html
    .html
  • js/background.js
    .js
  • js/priam.js
    .js
  • js/priam_background.js
    .js
  • js/priam_chrome.js
    .js
  • manifest.json
  • plugins/PriamNPAPI.dll
    .dll windows:5 windows x86 arch:x86

    455f95c246e91c78598ac3780135923d


    Headers

    Imports

    Exports

    Sections

  • priam_icon_128x128.png
    .png
  • priam_icon_48x48.png
    .png
  • $PLUGINSDIR/DcryptDll.dll
    .dll windows:4 windows x86 arch:x86

    5e1d3f49e5b7590e18325930cd3084f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    a9988f98d52a3c7d16228f87844f85ea


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    01d106fd6b60d71fb22bfc025916871f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/image.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisos.dll
    .dll windows:1 windows x86 arch:x86

    a70233c77fd258ec47709388c2338273


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Wajam/Firefox/firefox_trigger_extension.htm
    .html .js polyglot
  • $PROGRAMFILES/Wajam/Firefox/{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
    .zip
  • META-INF/WajamsTheUSERTRUSTNetworkID.rsa
  • META-INF/WajamsTheUSERTRUSTNetworkID.sf
  • META-INF/manifest.mf
  • chrome.manifest
  • content/browserLoad.js
    .js
  • content/firefoxOverlay.xul
    .xml
  • content/priam.js
    .js
  • content/priam.png
    .png
  • content/priam_background.js
    .js
  • content/priam_background_firefox.js
    .js
  • content/priam_firefox.js
    .js
  • defaults/preferences/priam_prefs.js
  • install.rdf
    .xml
  • $PROGRAMFILES/Wajam/IE/favicon.ico
  • $PROGRAMFILES/Wajam/IE/priam_bho.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9ab957feae07e24731cc304f0ca2056d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Wajam/Updater/$PROGRAMFILES/Wajam/uninstall.exe.nsis
  • $PROGRAMFILES/Wajam/Updater/WajamUpdater.exe
    .exe windows:5 windows x86 arch:x86

    1290526020ee7953dd528ca9b331c17f


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Wajam/Updater/wajamLogo.bmp