General

  • Target

    2bsk.zip

  • Size

    6.3MB

  • MD5

    1d7f85a525a59bc883a3f451f2eb9a00

  • SHA1

    3bd990f0adcfaa1c7518bc10c45d4998441e874e

  • SHA256

    549dbe51d672d510fcfc4bc41a0b7bc94052ecd2bd5da5b901af6fa830d9a270

  • SHA512

    e099f0c2755bc76c441261f0fa1b3ef183aab66813225eaa3cff631ecd7bc480f8c5b209d360e1fcd87442d41c6a97159c2195a70b672c9cebd5f7d18ea9b19e

  • SSDEEP

    196608:nlb9wPm0BDoKX3h63pDARZuX0o1S8T7JJZvaaBntZjFPsqT:lJUmGUKnhrKkCSkFJZvaaBPxPDT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bsk.zip
    .zip
  • 2bsk/!!!Readme_first!!!!.txt
  • 2bsk/Gold WareZ.nfo
  • 2bsk/Readme.txt
  • 2bsk/crack.rar
    .rar
  • Readme.txt
  • groceryc.dll
    .dll windows:5 windows x86 arch:x86

    566d7680b4d106ae1070f2a3b9a9e642


    Headers

    Imports

    Exports

    Sections

  • 2bsk/groceryc.dll
    .dll windows:5 windows x86 arch:x86

    566d7680b4d106ae1070f2a3b9a9e642


    Headers

    Imports

    Exports

    Sections

  • 2bsk/mobikin-heic-to-jpg-converter.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.txt
  • $PLUGINSDIR/license_br.txt
  • $PLUGINSDIR/license_cn.txt
  • $PLUGINSDIR/license_de.txt
  • $PLUGINSDIR/license_es.txt
  • $PLUGINSDIR/license_fr.txt
  • $PLUGINSDIR/license_it.txt
  • $PLUGINSDIR/license_jp.txt
  • $PLUGINSDIR/license_tw.txt
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/wizard120.bmp
  • $PLUGINSDIR/wizard144.bmp
  • $PLUGINSDIR/wizard192.bmp
  • $PLUGINSDIR/wizard96.bmp
  • ApplicationManifest.json
  • Bin/MobiKin HEIC to JPG Converter.exe
    .exe windows:6 windows x86 arch:x86

    7419472e8fff7e8e0ed82b7f51e6b1e9


    Code Sign

    Headers

    Imports

    Sections

  • Bin/Module.Helper.dll
    .dll windows:6 windows x86 arch:x86

    95c786a9fcb5436e6b5ad03a33215ff9


    Headers

    Imports

    Exports

    Sections

  • Bin/Module.View.dll
    .dll windows:6 windows x86 arch:x86

    fcc7587a099219e09eafd02b7cce5c67


    Headers

    Imports

    Exports

    Sections

  • Bin/concrt140.dll
    .dll windows:6 windows x86 arch:x86

    f7e155027608db4293a50332363a537b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/curl-ca-bundle.crt
  • Bin/groceryc.dll
    .dll windows:6 windows x86 arch:x86

    c76837f78ef65d99d23cb8decbcf6fbc


    Headers

    Imports

    Exports

    Sections

  • Bin/libBasic.dll
    .dll windows:6 windows x86 arch:x86

    d2101bac7d2a987a5ef1100a6f42493a


    Headers

    Imports

    Exports

    Sections

  • Bin/libHeic.dll
    .dll windows:6 windows x86 arch:x86

    852ba10b222fdc8cb10be9193564b2f0


    Headers

    Imports

    Exports

    Sections

  • Bin/libI18n.dll
    .dll windows:6 windows x86 arch:x86

    7d328f7723499ec85a69edd941986d78


    Headers

    Imports

    Exports

    Sections

  • Bin/libIPC.dll
    .dll windows:6 windows x86 arch:x86

    373688f3a7d37abeb008872a2227a90d


    Headers

    Imports

    Exports

    Sections

  • Bin/libRG.dll
    .dll windows:6 windows x86 arch:x86

    3bcb7bc0373f7c88a8cc805b731c93bf


    Headers

    Imports

    Exports

    Sections

  • Bin/libUpdate.dll
    .dll windows:6 windows x86 arch:x86

    23c6cd94ea423993873dd6fb90a4d26a


    Headers

    Imports

    Exports

    Sections

  • Bin/libcrypto-1_1.dll
    .dll windows:4 windows x86 arch:x86

    9c3d43842eff50541bc3ee3405238868


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    f5dca50695d12e3d38611a36a6f83d38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libde265.dll
    .dll windows:6 windows x86 arch:x86

    685b042ce62243d4f3f2d9af5d6a6c6e


    Headers

    Imports

    Exports

    Sections

  • Bin/libexpat.dll
    .dll windows:5 windows x86 arch:x86

    3e8feaacb321fb79a0d7d06b5b650752


    Headers

    Imports

    Exports

    Sections

  • Bin/libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    22de106f971ff0449d33ea6ca7f9dcba


    Headers

    Imports

    Exports

    Sections

  • Bin/libglog.dll
    .dll windows:6 windows x86 arch:x86

    b035a67312aaae022beba98360da8024


    Headers

    Imports

    Exports

    Sections

  • Bin/libheif.dll
    .dll windows:6 windows x86 arch:x86

    6b2e39a21650d6ca10163a871b2f2669


    Headers

    Imports

    Exports

    Sections

  • Bin/libjpeg-9.dll
    .dll windows:4 windows x86 arch:x86

    959b372b7bb415731a2ae184e4dc6728


    Headers

    Imports

    Exports

    Sections

  • Bin/libmingw_io.dll
    .dll windows:4 windows x86 arch:x86

    9b37f908a5d4b293a00e11795b2ba136


    Headers

    Imports

    Exports

    Sections

  • Bin/libpng14-14.dll
    .dll windows:4 windows x86 arch:x86

    e7fefd075956887a4465f3bb8bc65411


    Headers

    Imports

    Exports

    Sections

  • Bin/libssl-1_1.dll
    .dll windows:4 windows x86 arch:x86

    8a6299512038577b8910fa9c4d32b3b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/libxml2-2.dll
    .dll windows:4 windows x86 arch:x86

    e0b36b92da76a22f3727f03f309ceed5


    Headers

    Imports

    Exports

    Sections

  • Bin/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6042f1676a7711e459589ef169a5b501


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/pthreadGC2.dll
    .dll windows:4 windows x86 arch:x86

    5d8cffde43880e6cd40099ce37d02499


    Headers

    Imports

    Exports

    Sections

  • Bin/ucrtbase.dll
    .dll windows:10 windows x86 arch:x86

    7a86ba02a97907fb532ad47d5e59b822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b06d4116da69a513992d529f84731e6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Bin/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    d6281b62aae61d697629e6b66731d6e6


    Headers

    Imports

    Exports

    Sections

  • Bubble/2l.png
    .png
  • Bubble/3l.png
    .png
  • Bubble/PIE.htc
    .js
  • Bubble/PIE.js
    .js
  • I18n/de_DE/strings.mo
  • I18n/en_US/strings.mo
  • I18n/es_ES/strings.mo
  • I18n/fr_FR/strings.mo
  • I18n/it_IT/strings.mo
  • I18n/ja_JP/strings.mo
  • I18n/pt_PT/strings.mo
  • I18n/zh_CN/strings.mo
  • I18n/zh_TW/strings.mo
  • License/license_br.txt
  • License/license_cn.txt
  • License/license_de.txt
  • License/license_es.txt
  • License/license_fr.txt
  • License/license_it.txt
  • License/license_jp.txt
  • License/license_tw.txt
  • Option.json
  • Plugins/Converter/1.0.2/I18n/de_DE/strings.mo
  • Plugins/Converter/1.0.2/I18n/en_US/strings.mo
  • Plugins/Converter/1.0.2/I18n/es_ES/strings.mo
  • Plugins/Converter/1.0.2/I18n/fr_FR/strings.mo
  • Plugins/Converter/1.0.2/I18n/it_IT/strings.mo
  • Plugins/Converter/1.0.2/I18n/ja_JP/strings.mo
  • Plugins/Converter/1.0.2/I18n/pt_PT/strings.mo
  • Plugins/Converter/1.0.2/I18n/zh_CN/strings.mo
  • Plugins/Converter/1.0.2/I18n/zh_TW/strings.mo
  • Plugins/Converter/1.0.2/Module.Converter.dll
    .dll windows:6 windows x86 arch:x86

    a8916db324d6a6c4568ddc7b06907306


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Converter/1.0.2/Resources/Converter.json
  • Plugins/Converter/1.0.2/Resources/check-no.png
    .png
  • Plugins/Converter/1.0.2/Resources/check-yes.png
    .png
  • Plugins/Converter/1.0.2/Resources/complete.png
    .png
  • Plugins/Converter/1.0.2/Resources/content-photo-thumbnail.png
    .png
  • Plugins/Converter/1.0.2/Resources/converting.png
    .png
  • Plugins/Converter/1.0.2/Resources/entry/batch-image-conversion.png
    .png
  • Plugins/Converter/1.0.2/Resources/entry/main-add-image.png
    .png
  • Plugins/Converter/1.0.2/Resources/entry/single-image-conversion.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/add-file-normal.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/add-file-pressed.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/add-folder-normal.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/add-folder-pressed.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/delete-normal.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/delete-pressed.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/operate-search.png
    .png
  • Plugins/Converter/1.0.2/Resources/operator/pull-down.png
    .png
  • Plugins/Converter/1.0.2/Resources/right/off.png
    .png
  • Plugins/Converter/1.0.2/Resources/right/on.png
    .png
  • Plugins/Converter/1.0.2/plugin.load
  • Plugins/Heic/1.0.2/Module.Heic.dll
    .dll windows:6 windows x86 arch:x86

    de8395629a2c0378237a2c4331addcfc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Heic/1.0.2/plugin.load
  • Plugins/Title/1.0.2/I18n/de_DE/strings.mo
  • Plugins/Title/1.0.2/I18n/en_US/strings.mo
  • Plugins/Title/1.0.2/I18n/es_ES/strings.mo
  • Plugins/Title/1.0.2/I18n/fr_FR/strings.mo
  • Plugins/Title/1.0.2/I18n/it_IT/strings.mo
  • Plugins/Title/1.0.2/I18n/ja_JP/strings.mo
  • Plugins/Title/1.0.2/I18n/pt_PT/strings.mo
  • Plugins/Title/1.0.2/I18n/zh_CN/strings.mo
  • Plugins/Title/1.0.2/I18n/zh_TW/strings.mo
  • Plugins/Title/1.0.2/Module.Title.dll
    .dll windows:6 windows x86 arch:x86

    1da14742c8f1fc8e97d32871029d0243


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Plugins/Title/1.0.2/Resources/Title.json
  • Plugins/Title/1.0.2/Resources/close-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/close-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-buy-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-buy-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-help-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-help-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-home-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-home-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-maximize-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-maximize-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-register-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-register-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-reset-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-reset-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/main-setting-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/main-setting-pressed.png
    .png
  • Plugins/Title/1.0.2/Resources/min-normal.png
    .png
  • Plugins/Title/1.0.2/Resources/min-pressed.png
    .png
  • Plugins/Title/1.0.2/plugin.load
  • Resources/alert.png
    .png
  • Resources/application128x128-2.png
    .png
  • Resources/application128x128.png
    .png
  • Resources/close-normal.png
    .png
  • Resources/close-pressed.png
    .png
  • Resources/dialog/slide-down-normal.png
    .png
  • Resources/dialog/slide-down-pressed.png
    .png
  • Resources/dialog/take-back-normal.png
    .png
  • Resources/dialog/take-back-pressed.png
    .png
  • Resources/loading.gif
    .gif
  • Resources/preview-edit.png
    .png
  • Resources/register/buy-now.png
    .png
  • Resources/register/dropdown.png
    .png
  • Resources/register/dropup.png
    .png
  • Resources/register/edit.png
    .png
  • Resources/register/email.png
    .png
  • Resources/register/key.png
    .png
  • Resources/register/no.png
    .png
  • Resources/register/read-more.png
    .png
  • Resources/register/register.png
    .png
  • Resources/register/registered.png
    .png
  • Resources/register/tip-register.png
    .png
  • Resources/register/unregistered.png
    .png
  • Resources/register/yes.png
    .png
  • bubble.html
  • license.txt
  • template.html
    .html
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp