General

  • Target
    ba51622fc65d03ace0e38e67956ab53e
  • Size 892KB
  • Sample240308-c7vctsed4t
  • SHA256 30320af96c03f12642620e050dc28005166e5311e4b3cca914b503934e36526f
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

File Explorer

  • ba51622fc65d03ace0e38e67956ab53e
    .exe 892KB
  • $PLUGINSDIR/215AppsChecker.exe
    .exe 39KB
  • $PLUGINSDIR/AnimalShopping_license.rtf
    .rtf 102KB
  • $PLUGINSDIR/CustomLicense.dll
    .dll 4KB
  • $PLUGINSDIR/DefaultTab_license.rtf
    .rtf 14KB
  • $PLUGINSDIR/FindProcDLL.dll
    .dll 3KB
  • $PLUGINSDIR/GetVersion.dll
    .dll 6KB
  • $PLUGINSDIR/Iminent_license.rtf
    .rtf 56KB
  • $PLUGINSDIR/Math.dll
    .dll 66KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/frg_license.rtf
    .rtf 57KB
  • $PLUGINSDIR/gc_license.rtf
    .rtf 14KB
  • $PLUGINSDIR/image13.bmp
    10KB
  • $PLUGINSDIR/image14.bmp
    27KB
  • $PLUGINSDIR/image17.bmp
    242KB
  • $PLUGINSDIR/image18.bmp
    32KB
  • $PLUGINSDIR/image19.bmp
    25KB
  • $PLUGINSDIR/image22.bmp
    27KB
  • $PLUGINSDIR/image26.bmp
    4KB
  • $PLUGINSDIR/image28.bmp
    54KB
  • $PLUGINSDIR/image29.bmp
    9KB
  • $PLUGINSDIR/image31.bmp
    9KB
  • $PLUGINSDIR/image36.bmp
    34KB
  • $PLUGINSDIR/image37.bmp
    40KB
  • $PLUGINSDIR/image38.bmp
    8KB
  • $PLUGINSDIR/image39.bmp
    19KB
  • $PLUGINSDIR/image40.bmp
    26KB
  • $PLUGINSDIR/image40a.bmp
    35KB
  • $PLUGINSDIR/image40nb.bmp
    26KB
  • $PLUGINSDIR/image41.bmp
    187KB
  • $PLUGINSDIR/image42.bmp
    7KB
  • $PLUGINSDIR/image43.bmp
    24KB
  • $PLUGINSDIR/image44.bmp
    75KB
  • $PLUGINSDIR/image46.bmp
    31KB
  • $PLUGINSDIR/image46b.bmp
    5KB
  • $PLUGINSDIR/image47.bmp
    72KB
  • $PLUGINSDIR/image48.bmp
    23KB
  • $PLUGINSDIR/image49.bmp
    14KB
  • $PLUGINSDIR/image50.bmp
    50KB
  • $PLUGINSDIR/image51.bmp
    54KB
  • $PLUGINSDIR/image52.bmp
    4KB
  • $PLUGINSDIR/image54.bmp
    8KB
  • $PLUGINSDIR/image55.bmp
    82KB
  • $PLUGINSDIR/image56.bmp
    32KB
  • $PLUGINSDIR/image57.bmp
    4KB
  • $PLUGINSDIR/image58.bmp
    2KB
  • $PLUGINSDIR/image59.bmp
    11KB
  • $PLUGINSDIR/image6.bmp
    26KB
  • $PLUGINSDIR/image61.bmp
    13KB
  • $PLUGINSDIR/image62.bmp
    23KB
  • $PLUGINSDIR/image63.bmp
    53KB
  • $PLUGINSDIR/image64.bmp
    7KB
  • $PLUGINSDIR/image65.bmp
    7KB
  • $PLUGINSDIR/image66.bmp
    41KB
  • $PLUGINSDIR/image67.bmp
    5KB
  • $PLUGINSDIR/image68.bmp
    12KB
  • $PLUGINSDIR/image69.bmp
    26KB
  • $PLUGINSDIR/image70.bmp
    3KB
  • $PLUGINSDIR/image71.bmp
    8KB
  • $PLUGINSDIR/image72.bmp
    12KB
  • $PLUGINSDIR/image73.bmp
    9KB
  • $PLUGINSDIR/image74.bmp
    13KB
  • $PLUGINSDIR/intlib.dll
    .dll 24KB
  • $PLUGINSDIR/license_BL.rtf
    .rtf 80KB
  • $PLUGINSDIR/license_BL2.rtf
    .rtf 80KB
  • $PLUGINSDIR/license_CF.rtf
    .rtf 625KB
  • $PLUGINSDIR/license_Dimidu.rtf
    .rtf 44KB
  • $PLUGINSDIR/license_GDS.rtf
    .rtf 29KB
  • $PLUGINSDIR/license_ICM.rtf
    .rtf 36KB
  • $PLUGINSDIR/license_IWantThis.rtf
    .rtf 65KB
  • $PLUGINSDIR/license_S2W.rtf
    .rtf 58KB
  • $PLUGINSDIR/license_SIM.rtf
    .rtf 78KB
  • $PLUGINSDIR/license_aln.rtf
    .rtf 66KB
  • $PLUGINSDIR/license_bing.rtf
    .rtf 120KB
  • $PLUGINSDIR/license_cs.rtf
    .rtf 59KB
  • $PLUGINSDIR/license_csu.rtf
    .rtf 5KB
  • $PLUGINSDIR/license_efc.rtf
    .rtf 5KB
  • $PLUGINSDIR/license_iolo.rtf
    .rtf 61KB
  • $PLUGINSDIR/license_pcdr.rtf
    .rtf 12KB
  • $PLUGINSDIR/license_ps.rtf
    .rtf 69KB
  • $PLUGINSDIR/license_pw.rtf
    .rtf 27KB
  • $PLUGINSDIR/license_rr.rtf
    .rtf 28KB
  • $PLUGINSDIR/license_tfp.rtf
    .rtf 53KB
  • $PLUGINSDIR/license_wb.rtf
    .rtf 20KB
  • $PLUGINSDIR/license_wsc.rtf
    .rtf 42KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/oniminstall.exe
    .exe 115KB
  • $PLUGINSDIR/registry.dll
    .dll 16KB

ba51622fc65d03ace0e38e67956ab53e

  • IMPHASH 7fa974366048f9c551ef45714595665e
  • SHA256 30320af96c03f12642620e050dc28005166e5311e4b3cca914b503934e36526f
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths