General

  • Target

    8fc4dd38ac3696e6e6e3ccbd4338f04a

  • Size

    15.7MB

  • MD5

    8fc4dd38ac3696e6e6e3ccbd4338f04a

  • SHA1

    5172e2676edd921efd1fc64dc88522c2c1181b84

  • SHA256

    c3d393f2d35f2c2a6f6545d6a8bd80f0d78a969c7d44ff1cda51e338bbbc310b

  • SHA512

    158790df621a7e228cfd4c7a0bbd595e437cfd503c30e0202e64beb8cf2a759b031d93578882ef67749f4420fcd17e22d952f8bb91774fc75aaba89f08dd4b28

  • SSDEEP

    393216:Sb2yF4SRUhGE1M2Of62VNGSovR161QxfHBaM6fSwn6u:EF4ogUNK16YpaVp6u

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 8fc4dd38ac3696e6e6e3ccbd4338f04a
    .exe windows:4 windows x86 arch:x86

    7d8c16ee511989dba08d838c22062a91


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    97c84efb92e9e74c911abc996572ac5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    5322e86744834ba01139e3ad28cbf61e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SysVer.dll
    .dll windows:4 windows x86 arch:x86

    7f736ff6092c9a62e9f4fa50c98264ac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VerDll.dll
    .dll windows:4 windows x86 arch:x86

    ef884a06cb2ac4b01896bde30f9a6785


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/iotemp.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    9fc8db5756998482b1abcec498ee2737


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    a7a98f9c2f55921feb823b6f7e5ce74f


    Headers

    Imports

    Exports

    Sections

  • $_33_/Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • $_33_/Security.dll
    .dll windows:4 windows x86 arch:x86

    768cd33515ce32bf57e4e541b585b212


    Headers

    Imports

    Exports

    Sections

  • $_33_/riched20.dll
    .dll windows:5 windows x86 arch:x86

    b273fadc4482676e5c978e88480e0b9e


    Headers

    Imports

    Exports

    Sections

  • Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • QZone/Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • Riched32.dll
    .dll windows:5 windows x86 arch:x86

    a7a197727231042d22b24fc8d3f916fb


    Headers

    Imports

    Sections

  • Security.dll
    .dll windows:4 windows x86 arch:x86

    768cd33515ce32bf57e4e541b585b212


    Headers

    Imports

    Exports

    Sections

  • atl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e03cb90450eb0a29d0e4c0d30cad3943


    Headers

    Imports

    Exports

    Sections

  • riched20.dll
    .dll windows:5 windows x86 arch:x86

    b273fadc4482676e5c978e88480e0b9e


    Headers

    Imports

    Exports

    Sections

  • vbscript.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fb0d686bec70e50106c5a13d0760ef32


    Headers

    Imports

    Exports

    Sections