General

  • Target

    24c99ced0643875308f4b7e68f4ea475.bin

  • Size

    2.3MB

  • MD5

    1a775bc08a048c95a76046c1e3fa8ece

  • SHA1

    7bc4b518881c625676ffc379e842093a919ead0b

  • SHA256

    16675f85c337022d82ade133a5901308840b24ffa39069b413f4dd3368203ad9

  • SHA512

    9809954e698ef3ff6dd4c535f3c769119c03f5a2bca82468bb71c6cb103f8149e52384385ce0b6f9c94183c3875e89872af225efee526128fde3dc14ad211ccf

  • SSDEEP

    49152:kQ9wxwXogIdohbCiMsw37dLdGbbNN9pzvKuaoMsX3JcFLo3W:H+u4gIde03dLON9ZiRoFID

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 24c99ced0643875308f4b7e68f4ea475.bin
    .zip

    Password: infected

  • 7e0462bf232375e359288ddfb3c4177997e304905051c3293def4f0d41e22364.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • config.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    ec04767df02d0f5e543bd9bd399afce1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • gamesetup.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    2bca1372d9ae6e1c5ddad358699a3352


    Code Sign

    Headers

    Imports

    Sections

  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    b4b50f01529bb76779ed95a70fbeb1eb


    Code Sign

    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    84cd1ddf0ce9c6a74d331bc445074f42


    Code Sign

    Headers

    Imports

    Sections

  • km-bsw.exe
    .exe windows:5 windows x86 arch:x86

    2ce3a028f67b8cd50455db6ac7115c66


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections