General

  • Target

    8ac80d73bedebc7521e2254270f2dad1

  • Size

    1.4MB

  • MD5

    8ac80d73bedebc7521e2254270f2dad1

  • SHA1

    59d87cda4a45c16af16cdb1c499190ab622ad057

  • SHA256

    12b876badc3c9864e1f983434eaa6dcc09cc6ef9e6188f83fda12671e725686b

  • SHA512

    a2963996377969fbc7800886e2016429470bc4f5f4610c4b18b13620c99e585d0aaadb35287e5fe5ad4e21685b81f5ed04fb892933f1d74b24fb401ac91ed212

  • SSDEEP

    24576:+Sj14hIt3fhBjv6o0H2eAfMFVcZwIIAkxqIMP638gTvtDmsrw64LTHkeyQal0l:5j2hIJXj6u0LDqIMP638ghDmsrp4L4QL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 8ac80d73bedebc7521e2254270f2dad1
    .rar
  • reshade-install.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7868cd55f358bfb360f9eb8ce1512ca0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.CRT.manifest
    .xml
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • example.jpg
    .jpg
  • logomark32x32.ico
  • msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    c063c2572f227e960a64eae5af94a570


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    b0700bc9e106db80fe9ccd4f98f8e05f


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    635f41773dbc955784003816fda2af80


    Headers

    Imports

    Exports

    Sections

  • reshade.exe
    .exe windows:4 windows x86 arch:x86

    1232854a71f5a8512c2acb2c127ef3e8


    Headers

    Imports

    Sections

  • 新云软件.url
    .url