General

  • Target

    cb770d242117a830bfbf59bda4265dac

  • Size

    852KB

  • MD5

    cb770d242117a830bfbf59bda4265dac

  • SHA1

    a486d3d77ef03cf46658de81e71f3f97c32ce35e

  • SHA256

    8d2edb255b6ca03e42e075336ecdcecb4046ea32cd672fe50d1c74c2d19c0408

  • SHA512

    6e8a651845bfef05758b6cace953e219bed23cf6760094167cac3c9cdd5a71aac248a2ac6d0ca602454c38dcf8acaba68eef7825d9ce80e05942c978c74b7bf7

  • SSDEEP

    12288:LNmydWGUmEMQNCd8ZUWJ9vgo1J+hqrsaoaAz+s8hASfVEmZEGkyBCYMpz:ZfAhC7W9v/J+Ursa5Az+btEm/kht

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • cb770d242117a830bfbf59bda4265dac
    .rar
  • MaxIE_Browser_Setup.exe
    .exe windows:4 windows x86 arch:x86

    5f65217e6605a4cda5d136ec8a66748c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Groups/order.txt
  • Groups/.cgp
  • Language/ChineseGB.ini
  • MaxIE.exe
    .exe windows:4 windows x86 arch:x86

    ffeca5b078bdefee46cfa5d280f6f8cd


    Headers

    Imports

    Exports

    Sections

  • Plugin/FlashSaveGB/FlashSave.html
    .html .js polyglot
  • Plugin/FlashSaveGB/flash.ico
  • Plugin/FlashSaveGB/plugin.ini
  • Plugin/KillAd/killad.htm
    .html .js polyglot
  • Plugin/KillAd/killad.ico
  • Plugin/KillAd/plugin.ini
  • Plugin/MouseUnlock/MouseUnlock.htm
    .html .js polyglot
  • Plugin/MouseUnlock/MouseUnlock.ico
  • Plugin/MouseUnlock/plugin.ini
  • Plugin/PageZoomMore/icon.ico
  • Plugin/PageZoomMore/plugin.ini
  • Plugin/PageZoomMore/script.htm
    .html
  • Plugin/SnapShot/CameraDll.dll
    .dll windows:4 windows x86 arch:x86

    d13ed92defec823b1f97f9c519a903c3


    Headers

    Imports

    Exports

    Sections

  • Plugin/SnapShot/SnapShot.exe
    .exe windows:4 windows x86 arch:x86

    9c89517f6c4143a881bf041de4b5737a


    Headers

    Imports

    Sections

  • Plugin/SnapShot/plugin.ini
  • Plugin/ViewPage/ViewPage_cn.htm
    .html .js polyglot
  • Plugin/ViewPage/plugin.ini
  • Plugin/ViewPage/readme.txt
  • Plugin/ViewPage/v.ico
  • Resource/Filter.ini.default
  • Resource/PopFilter.WAV
  • Resource/Resource.htm
    .html
  • Resource/Software.ico
  • Resource/Start.htm
    .html
  • Resource/StartEn.htm
    .html
  • Resource/baidu.ico
  • Resource/google.ico
  • Skin/Cartoon/BackGround.bmp
  • Skin/Cartoon/FavBar.bmp
  • Skin/Cartoon/Go.bmp
  • Skin/Cartoon/MainTool16.bmp
  • Skin/Cartoon/MainTool24.bmp
  • Skin/Cartoon/MainToolGray16.bmp
  • Skin/Cartoon/MainToolGray24.bmp
  • Skin/Cartoon/StatusTool.bmp
  • Skin/Cartoon/SystemBar.bmp
  • Skin/Cartoon/TabActive.bmp
  • Skin/Cartoon/TabBackGround.bmp
  • Skin/Cartoon/TabNormal.bmp
  • Skin/Cartoon/TaskBar.bmp
  • Skin/Default/BackGround.bmp
  • Skin/Default/FavBar.bmp
  • Skin/Default/Go.bmp
  • Skin/Default/MainAnimIcon.bmp
  • Skin/Default/MainMenu.bmp
  • Skin/Default/MainTool16.bmp
  • Skin/Default/MainTool24.bmp
  • Skin/Default/MainToolGray16.bmp
  • Skin/Default/MainToolGray24.bmp
  • Skin/Default/SearchBar.bmp
  • Skin/Default/StatusTool.bmp
  • Skin/Default/SystemBar.bmp
  • Skin/Default/TabActive.bmp
  • Skin/Default/TabActiveBottom.bmp
  • Skin/Default/TabBackGround.bmp
  • Skin/Default/TabNormal.bmp
  • Skin/Default/TabNormalBottom.bmp
  • Skin/Default/TaskBar.bmp
  • Uninst.exe
    .exe windows:4 windows x86 arch:x86

    5f65217e6605a4cda5d136ec8a66748c


    Headers

    Imports

    Sections

  • User/CollectorOutput.txt
  • User/DownManager.ini
    .vbs
  • User/Filter.ini
  • User/MaxIE.ini
  • User/Proxy.ini
  • User/SearchEngine.ini
  • 新云软件.url
    .url