General

  • Target

    9bfb2d84cba6fd6c4361a85c2ebf5e14

  • Size

    3.1MB

  • MD5

    9bfb2d84cba6fd6c4361a85c2ebf5e14

  • SHA1

    d9faff458e03688d5571049e8dfbff9e1cbfab21

  • SHA256

    8eeae9cb0529c7c5f6491cbfeaa5431b7413476fc066fb599d2a22af3974c5ee

  • SHA512

    d54e7bbac19a30952bd90a51bf0c750f3b14a3e6639788ac35cffafe70b5d73e0d2f08a09363f54a956fe8544714fd81436891c7179dde6565f868ca8f01cff7

  • SSDEEP

    98304:Y3YIFzf8wF1cFMFgg5n5j4qTvN2fHgO8bnb4:AFDF1ph5np4cEgO8Dk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9bfb2d84cba6fd6c4361a85c2ebf5e14
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e9cfbaa1410d6085206b91504149f7bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/Photos/01.png
    .png
  • $TEMP/XL7InstallUI/Photos/02.png
    .png
  • $TEMP/XL7InstallUI/Photos/03.png
    .png
  • $TEMP/XL7InstallUI/Photos/04.png
    .png
  • $TEMP/XL7InstallUI/Photos/05.png
    .png
  • $TEMP/XL7InstallUI/Photos/Arrow.png
    .png
  • $TEMP/XL7InstallUI/Photos/Close.png
    .png
  • $TEMP/XL7InstallUI/Photos/Folder.png
    .png
  • $TEMP/XL7InstallUI/Photos/GeneralPro.png
    .png
  • $TEMP/XL7InstallUI/Photos/Light.png
    .png
  • $TEMP/XL7InstallUI/Photos/MessageBack.png
    .png
  • $TEMP/XL7InstallUI/Photos/ProBlue.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduBottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomBackOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/button.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishMiddleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/font.png
    .png
  • $TEMP/XL7InstallUI/Photos/frame.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon2.png
    .png
  • $TEMP/XL7InstallUI/Photos/middleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/select.png
    .png
  • $TEMP/XL7InstallUI/Photos/setup.ico
  • $TEMP/XL7InstallUI/Photos/title.ico
  • $TEMP/XL7InstallUI/Photos/tooltip.png
    .png
  • $TEMP/XL7InstallUI/Photos/upOver.png
    .png
  • $TEMP/XL7InstallUI/XL7InstallUI.dll
    .dll windows:4 windows x86 arch:x86

    1f35ec707ef5cb7fd74f69e321ea6d9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    d97f1369952134ddf6c76d159175683e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    9cfb35e4199eef27f6fcf72415dd64b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections

  • Program/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    d97f1369952134ddf6c76d159175683e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    9cfb35e4199eef27f6fcf72415dd64b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • Program/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • Program/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections