General

  • Target

    c0048de5bb20f6b6afff7cd3472724ed

  • Size

    322KB

  • MD5

    c0048de5bb20f6b6afff7cd3472724ed

  • SHA1

    3ef3e59be8f70d783428fdc827fd6022205aab68

  • SHA256

    6c18feee0b8e9a2112f82d4fc43539ee3b972125c98a4ce35b7640b680bc379f

  • SHA512

    24bab2fa06c411236c69e66540b855468e5bb9db6e5cc57bd2d1c703492ee343edceddc5ba630beb0ee9b14283195332acc4a865b244f9832d117640ec1f8ce0

  • SSDEEP

    6144:1sqSuLWoSNzoaBY1kznJ0XkCmGTzV6ShOFonDckajC:FSpoSTT/CmGThB0onwT2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • c0048de5bb20f6b6afff7cd3472724ed
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/poinbag/domainrefer.dat
  • $APPDATA/poinbag/keycode.dat
  • $APPDATA/poinbag/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    1e9621cfcd4ae80e95c364e38bcff5d7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/DLLWebCount.dll
    .dll windows:4 windows x86 arch:x86

    324e87a129b7b2af320238c8ab284874


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IEKill.dll
    .dll windows:4 windows x86 arch:x86

    144dfc1dead6dbf5082de448c187851b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDelete.dll
    .dll windows:4 windows x86 arch:x86

    1e9621cfcd4ae80e95c364e38bcff5d7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • poinbag.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b50193cc1f4bc1cefc2d29dd0955f5f3


    Headers

    Imports

    Exports

    Sections

  • poinbagup.exe
    .exe windows:4 windows x86 arch:x86

    815dd52a0e9e22871a00c2ad04a7f397


    Headers

    Imports

    Sections