Overview

overview

6

Static

static

3

c45e7a8967...aa.exe

windows7-x64

1

c45e7a8967...aa.exe

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

donatedlg.htm

windows7-x64

1

donatedlg.htm

windows10-2004-x64

1

sbrowser.chm

windows7-x64

1

sbrowser.chm

windows10-2004-x64

1

sbrowser.exe

windows7-x64

6

sbrowser.exe

windows10-2004-x64

6

syntax/VBSCRIPT.vbs

windows7-x64

1

syntax/VBSCRIPT.vbs

windows10-2004-x64

1

translate/...sh.htm

windows7-x64

1

translate/...sh.htm

windows10-2004-x64

1

translate/google.htm

windows7-x64

1

translate/google.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c45e7a896783d1c8a8be18bf90becdaa

  • Size

    1.5MB

  • MD5

    c45e7a896783d1c8a8be18bf90becdaa

  • SHA1

    0a982c9929f22b74f686851e9ef0bb27542756b7

  • SHA256

    9212c17f2db04836ae13ef6b23b4f5472127983b22987dd1c8973c703339a7b7

  • SHA512

    9c98fed3b9cb174aeef1afd2afb8f32554f69c67a39c98d1412b9d7d94fc356ae494ee308f5ed0b481c4285e42e0c9614fa0955d982b1d098be7c5be1f2fb87c

  • SSDEEP

    24576:f8TuaaI16B12gCVLJfNSo3oEc5OgJAz7+1HC4oUODJib0E76XWXhm5:f8TXZ16SgCzfNSD5Oaz1HCBViQE76XW6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs
    installer

Files

  • c45e7a896783d1c8a8be18bf90becdaa
    .exe windows:4 windows x86 arch:x86

    dae718ca7c0da2949ad685c2d593ec7a


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Afrikaans.ini
  • Arabic.ini
  • Bahasa Melayu.ini
  • Bosnian.ini
  • Brasileiro.ini
  • Bulgarian.ini
  • Catalan.ini
  • Chinese Simplified.ini
  • Chinese Traditional.ini
  • Czech.ini
  • Danish.ini
  • Donation_Off.gif
    .gif
  • Donation_On.gif
    .gif
  • Dutch.ini
  • English.ini
  • Estonian.ini
  • Farsi.ini
  • Finnish.ini
  • French.ini
  • Galego.ini
  • German.ini
  • Greek.ini
  • Hebrew.ini
  • Hungarian.ini
  • Indonesian.ini
  • Italian.ini
  • Japanese.ini
  • Korean.ini
  • Lithuanian.ini
  • Macedonian.ini
  • Norwegian Bokmaal.ini
  • Norwegian Nynorsk.ini
  • Polish.ini
  • Portuguese Brazilian.ini
  • Portuguese Padrao.ini
  • Portuguese.ini
  • Romanian.ini
  • Russian.ini
  • Serbian.ini
  • Slovak.ini
  • Slovenian.ini
  • Spanish.ini
  • Swedish.ini
  • Turkish.ini
  • Ukrainian.ini
  • WebPage.ico
  • atlg.ico
  • barback.bmp
  • beep_popup.wav
  • blocked.gif
    .gif
  • bottom.bmp
  • bottomleft.bmp
  • bottomright.bmp
  • close.bmp
  • custom.ini
  • default/AOL.qseg
  • default/Acronym Finder.qseg
  • default/All The Web.qseg
  • default/Altavista.qseg
  • default/Ask Jeeves.qseg
  • default/Clusty.qseg
  • default/[email protected]
  • default/Download.com.qseg
  • default/Enable Ad Filter.mnit
  • default/Example Group.sgp
  • default/Excite.qseg
  • default/Filter Current Page Now.mnit
  • default/Find.mnit
  • default/Google Directories.qseg
  • default/Google Groups.qseg
  • default/Google Images.qseg
  • default/Google Search Current Site.qseg
  • default/Google.qseg
  • default/HotBot.qseg
  • default/Kingsoft Dictionary.qseg
  • default/Lycos.qseg
  • default/MSN.qseg
  • default/Mamma.qseg
  • default/MenuOrder.ini
  • default/MenuOrder_QuickSearch.ini
  • default/Netscape.qseg
  • default/Print Preview.mnit
  • default/RSS News Example.sgp
  • default/Send Shortcut To Desktop.mnit
  • default/Show Pictures.mnit
  • default/Simtel.qseg
  • default/[email protected]
  • default/Translate Into English.mnit
  • default/Tucows.qseg
  • default/Weather.qseg
  • default/Webster Dictionary.qseg
  • default/Webster Thesaurus.qseg
  • default/Yahoo.qseg
  • default/alias.ini
  • default/ufblack.ini
  • default/ufwhite.ini
  • default/whatUseek.qseg
  • default/[email protected]
  • dictionary.ini
  • donatedlg.htm
    .html
  • framefill.bmp
  • left.bmp
  • leftbottom.bmp
  • lefttop.bmp
  • logo.avi
  • max.bmp
  • min.bmp
  • mnit.ico
  • nav_first.gif
    .gif
  • qseg.ico
  • qstb.bmp
  • qstb_h.bmp
  • readme.txt
  • right.bmp
  • rightbottom.bmp
  • righttop.bmp
  • sbrowser.chm
    .chm
  • sbrowser.exe
    .exe windows:4 windows x86 arch:x86

    faf79d75329e64ad2410556b696e8814


    Headers

    Imports

    Exports

    Sections

  • sbrowser.ico
  • sgp.ico
  • skin.ini
  • splash.bmp
  • syntax/DEFAULT.BCP
  • syntax/HTML.BCP
  • syntax/JSCRIPT.BCP
  • syntax/VBSCRIPT.BCP
    .vbs
  • template.ini
  • toolbar.bmp
  • toolbar_g.bmp
  • toolbar_h.bmp
  • toolbar_s.bmp
  • toolbar_s_g.bmp
  • toolbar_s_h.bmp
  • top.bmp
  • topleft.bmp
  • topright.bmp
  • translate/babelfish.htm
    .html
  • translate/google.htm
    .html
  • wizard.gif
    .gif