General

  • Target

    SF-Helper-[#348#].exe

  • Size

    293KB

  • MD5

    cb7540975a2d1643707fa30760b36c7b

  • SHA1

    5ae5cd61058dd0979e2c898bda1b07d26d041f3f

  • SHA256

    9c44660a837beaed12beb9cb626ee2886910adefe044f269240a1e2db1ee6dbf

  • SHA512

    730d22fcf5228f7c03eb757d786e7bceebf362f63bec6d2a1c3307675bca87af580bbd0b0002f7a1cdc559928137d5e58512d90a29023b8aeb22cac2ba1d8717

  • SSDEEP

    3072:ZbG7N2kDTHUpoui3uy1RjwOkisGB+SWl912pU38BPtmWlUlZKAOg5FVFDs2EfyHo:ZbE/HUuuaEOBkR8B1m7rKAOg5jjsL

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • SF-Helper-[#348#].exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    163fdad7b5f915e3a0ca7ad1d08b4ff8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $_36_.nsis