General

  • Target

    c3a8c0986686bd523132f4b86c7249c6

  • Size

    315KB

  • MD5

    c3a8c0986686bd523132f4b86c7249c6

  • SHA1

    1aeb3439c09f5b58d134b9c044b87d072e135396

  • SHA256

    e3c511e94c44a379a0b4dcfc9d2230f517b50176f76214d9044d5abd6cccfe7b

  • SHA512

    a5a993c636c792933c9aa21b12d8bb555a82a3ad698c2568e9bb9fca65ba456b23d41a94d1c9d0a367bfdb8e4acbc961323092971af522f7d40653884c6114c4

  • SSDEEP

    6144:IQqg35EP2kQN6KXsrZ9Y5kygDw2keN1gqO8mxxmNuGjvJiRA:NELYsrZ3yqPxN1g38mxxzAvJiRA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • c3a8c0986686bd523132f4b86c7249c6
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:4 windows x86 arch:x86

    0d87660e15e4e2499d63742f6c9630fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IMInstaller.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cpudesc.dll
    .dll windows:4 windows x86 arch:x86

    c6a59b1080c20e84c1c392f75b2d75f4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/fm_license.rtf
    .rtf
  • $PLUGINSDIR/image.bmp
  • $PLUGINSDIR/image2.bmp
  • $PLUGINSDIR/image3.bmp
  • $PLUGINSDIR/image4.bmp
  • $PLUGINSDIR/image5.bmp
  • $PLUGINSDIR/image6.bmp
  • $PLUGINSDIR/image7.bmp
  • $PLUGINSDIR/image8.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    54317f9e35e039c28fdb421cf518703e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/license.rtf
    .rtf
  • $PLUGINSDIR/ls_license.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/obes_license.rtf
    .rtf
  • $PLUGINSDIR/obfr_license.rtf
    .rtf
  • $PLUGINSDIR/obit_license.rtf
    .rtf
  • $PLUGINSDIR/real_license.rtf
    .rtf
  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ws_license.rtf
    .rtf