General

  • Target

    9c11bca4a30e03119e4f9e2757649a51

  • Size

    631KB

  • MD5

    9c11bca4a30e03119e4f9e2757649a51

  • SHA1

    852978af38b949d9e69ce89be486ed48f5188d69

  • SHA256

    82a3fa00befd991fae344a09e96fa8b1de8d353b1820375a562bc765b6ed668d

  • SHA512

    c0e35766e478da01f3bf3c96c5debb374b00820a2c6da438ba65906cceb3c67e2e121fba419af04c88a7653a09f838f8bc9a4f40d589651db48b0b31e0e63bd0

  • SSDEEP

    12288:bqxgDJbUEcFVIp7yLDXNfNBUDmaBclYwKeiAa4UXDjrVt8pvn/qRmeUwwFISi:TbGj8s8mdCeiEUXzA5/6Gww5i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9c11bca4a30e03119e4f9e2757649a51
    .rar
  • ssk_setup.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Config/savecan.ini
  • Config/timer.dat
  • Core.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    11aad6c1d3aba10a8acb41558acf5e91


    Headers

    Imports

    Exports

    Sections

  • SaveCan.exe
    .exe windows:4 windows x86 arch:x86

    9775749e733104124f579181991a5996


    Headers

    Imports

    Exports

    Sections

  • Skins/Thumbs.db
  • Skins/blue/main.png
    .png
  • Skins/blue/mainDown.png
    .png
  • Skins/blue/progress1.png
    .png
  • Skins/blue/skin.xml
    .xml
  • Skins/blue/tool.png
    .png
  • Skins/blue/tool.xml
    .xml
  • Skins/blue/tool2.png
    .png
  • Timer.dll
    .dll windows:4 windows x86 arch:x86

    da802eeaa17fd3f9de94597137ebbcb8


    Headers

    Imports

    Exports

    Sections

  • savecan32.sys
    .sys windows:5 windows x86 arch:x86

    d59e50c6cd75833d71fdc947a1cca675


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    3c1b27083f9fe9eb9b4f9671a370a84d


    Headers

    Imports

    Sections

  • 新云软件.url
    .url