General

  • Target

    be4ce1d7a3c63a982099f8b0160f730f

  • Size

    4.6MB

  • MD5

    be4ce1d7a3c63a982099f8b0160f730f

  • SHA1

    957dfda2000cdb502422d3eef266a706a8b6b1af

  • SHA256

    41ee4c379720c2c109bfb89abb67cf2c856de3c9f565749bb082854c827ae710

  • SHA512

    f3255ac5bbc9d556f7bb4c7ef6cc0783a24739fc5d87f3fd93096af2d1bf6aee34b6e221801101e4b6f4a1b1a54c2344fd7ac066cc240ca518bd22b3c484eadb

  • SSDEEP

    98304:Y3YIFzf8wF1cFMFgg5n5j4qTvN2fHgO8bnbRelrrER11+6tlEbdM0:AFDF1ph5np4cEgO8DFKM11ptabq0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • be4ce1d7a3c63a982099f8b0160f730f
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e9cfbaa1410d6085206b91504149f7bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/Photos/01.png
    .png
  • $TEMP/XL7InstallUI/Photos/02.png
    .png
  • $TEMP/XL7InstallUI/Photos/03.png
    .png
  • $TEMP/XL7InstallUI/Photos/04.png
    .png
  • $TEMP/XL7InstallUI/Photos/05.png
    .png
  • $TEMP/XL7InstallUI/Photos/Arrow.png
    .png
  • $TEMP/XL7InstallUI/Photos/Close.png
    .png
  • $TEMP/XL7InstallUI/Photos/Folder.png
    .png
  • $TEMP/XL7InstallUI/Photos/GeneralPro.png
    .png
  • $TEMP/XL7InstallUI/Photos/Light.png
    .png
  • $TEMP/XL7InstallUI/Photos/MessageBack.png
    .png
  • $TEMP/XL7InstallUI/Photos/ProBlue.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduBottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomBackOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/button.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishMiddleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/font.png
    .png
  • $TEMP/XL7InstallUI/Photos/frame.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon2.png
    .png
  • $TEMP/XL7InstallUI/Photos/middleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/select.png
    .png
  • $TEMP/XL7InstallUI/Photos/setup.ico
  • $TEMP/XL7InstallUI/Photos/title.ico
  • $TEMP/XL7InstallUI/Photos/tooltip.png
    .png
  • $TEMP/XL7InstallUI/Photos/upOver.png
    .png
  • $TEMP/XL7InstallUI/XL7InstallUI.dll
    .dll windows:4 windows x86 arch:x86

    1f35ec707ef5cb7fd74f69e321ea6d9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    d97f1369952134ddf6c76d159175683e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    9cfb35e4199eef27f6fcf72415dd64b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections

  • Program/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    d97f1369952134ddf6c76d159175683e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    9cfb35e4199eef27f6fcf72415dd64b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • Program/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • Program/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections