General

  • Target

    c076fa4205302d989e24b79e0fa97ab8

  • Size

    16.9MB

  • MD5

    c076fa4205302d989e24b79e0fa97ab8

  • SHA1

    6ce57b10129ee6a7d8e2ce4845a3b9e3c99fb761

  • SHA256

    788a337fd5cf371ba1d5fce60da2fe3ef219a84deb9660778ed566144bf1f101

  • SHA512

    6c8ac8a42c937470e738cbc99a58a0536864db991aae99339b7db03c33d38feeb2905caf6b5d0b7d0b607cf179bd5e88f83b2be736b063538f01d587ecb2f6dd

  • SSDEEP

    393216:vNkXCdbRGsxpPcBECIpy6O0uALJYaO1cwWHUCJFOEBHwTj3hliW5qd:6CdtGsHCIpFOJmwM2EBQTLHJ5qd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c076fa4205302d989e24b79e0fa97ab8
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Licence.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/Photos/01.png
    .png
  • $TEMP/XL7InstallUI/Photos/02.png
    .png
  • $TEMP/XL7InstallUI/Photos/03.png
    .png
  • $TEMP/XL7InstallUI/Photos/04.png
    .png
  • $TEMP/XL7InstallUI/Photos/05.png
    .png
  • $TEMP/XL7InstallUI/Photos/Arrow.png
    .png
  • $TEMP/XL7InstallUI/Photos/Close.png
    .png
  • $TEMP/XL7InstallUI/Photos/Folder.png
    .png
  • $TEMP/XL7InstallUI/Photos/GeneralPro.png
    .png
  • $TEMP/XL7InstallUI/Photos/Light.png
    .png
  • $TEMP/XL7InstallUI/Photos/MessageBack.png
    .png
  • $TEMP/XL7InstallUI/Photos/ProBlue.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduBottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/baiduUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomBackOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/bottomOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/button.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishMiddleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/finishUpOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/font.png
    .png
  • $TEMP/XL7InstallUI/Photos/frame.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon.png
    .png
  • $TEMP/XL7InstallUI/Photos/icon2.png
    .png
  • $TEMP/XL7InstallUI/Photos/middleOver.png
    .png
  • $TEMP/XL7InstallUI/Photos/select.png
    .png
  • $TEMP/XL7InstallUI/Photos/setup.ico
  • $TEMP/XL7InstallUI/Photos/title.ico
  • $TEMP/XL7InstallUI/Photos/tooltip.png
    .png
  • $TEMP/XL7InstallUI/Photos/upOver.png
    .png
  • $TEMP/XL7InstallUI/XL7InstallUI.dll
    .dll windows:4 windows x86 arch:x86

    bcaef0b359c9cc35e89e4098213a721b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XL7InstallUIPlugin.dll
    .dll windows:4 windows x86 arch:x86

    b5c9cc2caf131cc4fad6ceff5320f8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    3ca83f64dc4751f14d4affba8abaa19e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    be691487880b5c67812a3bae2a5cb2bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • $TEMP/XL7InstallUI/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections

  • Program/XLFSIO.dll
    .dll windows:4 windows x86 arch:x86

    3ca83f64dc4751f14d4affba8abaa19e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/XLGraphic.dll
    .dll windows:4 windows x86 arch:x86

    be691487880b5c67812a3bae2a5cb2bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Program/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • Program/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    b5556ad19388998fa1108d4fa8ae9798


    Headers

    Imports

    Exports

    Sections

  • Program/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • Program/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • Program/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • Program/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    e9b5d30fbeb84dc7dd0e2c36954e6d47


    Headers

    Imports

    Exports

    Sections