General

  • Target

    de4f421908a8dde75e14e4a16676e7ad

  • Size

    707KB

  • MD5

    de4f421908a8dde75e14e4a16676e7ad

  • SHA1

    79b63f26c5ba55b4493b820dabbf873eeaa2c3f9

  • SHA256

    e773dae7446b046c6569e4bec35d26af2bcbeb327fb52ae72e4adb383ea5c8b0

  • SHA512

    c8b74aeed708b683f94c98964ae3d7a737789ec2ce83d2a64bbd4b6f6b80dc3bca87fc8fa3b737102a85283de5d5ae37a7719380742cbaec25b1c7f6f3fe157d

  • SSDEEP

    12288:crl4Kp9C25ZTfGqACKNcXSDza3ta/Phhtt08qgZSWDObJd5A88vKVs/oZmvKyKrC:QaKDCo+pcae3ECgZKbJd5A88vKy/emvN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 3 IoCs

Files

  • de4f421908a8dde75e14e4a16676e7ad
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CustomLicense.dll
    .dll windows:4 windows x86 arch:x86

    0d87660e15e4e2499d63742f6c9630fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DefaultTab_license.rtf
    .rtf
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:4 windows x86 arch:x86

    5e41893d1528e7648e03f81030aca366


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    c1eddc2d743572429fa0b1a79b7ac0fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    afa8e526425f3585465337467d0b5909


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/frg_license.rtf
    .rtf
  • $PLUGINSDIR/gc_license.rtf
    .rtf
  • $PLUGINSDIR/image13.bmp
  • $PLUGINSDIR/image14.bmp
  • $PLUGINSDIR/image17.bmp
  • $PLUGINSDIR/image18.bmp
  • $PLUGINSDIR/image19.bmp
  • $PLUGINSDIR/image21.bmp
  • $PLUGINSDIR/image22.bmp
  • $PLUGINSDIR/image24.bmp
  • $PLUGINSDIR/image26.bmp
  • $PLUGINSDIR/image28.bmp
  • $PLUGINSDIR/image29.bmp
  • $PLUGINSDIR/image31.bmp
  • $PLUGINSDIR/image33.bmp
  • $PLUGINSDIR/image35.bmp
  • $PLUGINSDIR/image36.bmp
  • $PLUGINSDIR/image37.bmp
  • $PLUGINSDIR/image38.bmp
  • $PLUGINSDIR/image39.bmp
  • $PLUGINSDIR/image40.bmp
  • $PLUGINSDIR/image41.bmp
  • $PLUGINSDIR/image42.bmp
  • $PLUGINSDIR/image43.bmp
  • $PLUGINSDIR/image44.bmp
  • $PLUGINSDIR/image45.bmp
  • $PLUGINSDIR/image46.bmp
  • $PLUGINSDIR/image46b.bmp
  • $PLUGINSDIR/image47.bmp
  • $PLUGINSDIR/image48.bmp
  • $PLUGINSDIR/image49.bmp
  • $PLUGINSDIR/image50.bmp
  • $PLUGINSDIR/image51.bmp
  • $PLUGINSDIR/image52.bmp
  • $PLUGINSDIR/image53.bmp
  • $PLUGINSDIR/image54.bmp
  • $PLUGINSDIR/intlib.dll
    .dll windows:4 windows x86 arch:x86

    e886a412cdaf11998a8eeffda508e913


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/jp_license.rtf
    .rtf
  • $PLUGINSDIR/license_GDS.rtf
    .rtf
  • $PLUGINSDIR/license_cb.rtf
    .rtf
  • $PLUGINSDIR/license_iolo.rtf
    .rtf
  • $PLUGINSDIR/license_pbr.rtf
    .rtf
  • $PLUGINSDIR/license_pw.rtf
    .rtf
  • $PLUGINSDIR/license_red.rtf
    .rtf
  • $PLUGINSDIR/license_rr.rtf
    .rtf
  • $PLUGINSDIR/license_rs.rtf
    .rtf
  • $PLUGINSDIR/license_tfp.rtf
    .rtf
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    cd53277eaa7bbb8fb5b2b678274dcb4e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stubdl.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections