General

  • Target

    79a615faa4a4197941663e443c7f6a3f0ba142351be278c26f94868fcb06b154

  • Size

    864KB

  • MD5

    75ddd2f060a12d963d147cf6daf3bd3f

  • SHA1

    7cb834a904d16517a378a357de49a25fda1fc3b4

  • SHA256

    79a615faa4a4197941663e443c7f6a3f0ba142351be278c26f94868fcb06b154

  • SHA512

    c47e4fdd808e04e2e77d78015d472b3b0e99126bdcf21ca19c1a5872b1a18788c1389255ee38d89dfd9f7eb35597fb7d31ea2e23dea4bdf4925d214dfb83cc95

  • SSDEEP

    24576:1aE2MzI1NOIzp04qSVmGN6csDitNyNdEOM0:MhMz/YJhNPSEOM0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 79a615faa4a4197941663e443c7f6a3f0ba142351be278c26f94868fcb06b154
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    2e4d94706c699d2da474aa823430b9a5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • YGPSvc.dll
    .dll windows:4 windows x86 arch:x86

    c7b464a1c45e9096b954cf9a668bf29c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ymsdk.dll
    .dll windows:4 windows x86 arch:x86

    9f670c9a84457b9fc149b4f84412e97e


    Headers

    Imports

    Exports

    Sections