General

  • Target

    df27a88d96c8dc6db8c4718c4f92d009

  • Size

    148KB

  • MD5

    df27a88d96c8dc6db8c4718c4f92d009

  • SHA1

    233e5f96fa83d511e7d4200903c35d22d84e0793

  • SHA256

    c257c205cec4046ce31adbb1f8526db8dc21fa1c98b6101685434bb05e067b8f

  • SHA512

    163536ee6820570e57e2cbf553c4693d4e29e67706e5070e3f741e1afe71be2265e8d5e40d497d110e05753899f11edce2ee37cf5df3108043acac0cdb4d91c3

  • SSDEEP

    3072:qLk395hYXJbjdn/+5M14EWlsdg2/ONnDWXmE10C1g2oqn:qQqJd/YMH5q2yy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • df27a88d96c8dc6db8c4718c4f92d009
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $_5_/plugin/bibibei/bibibei.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    61d1330ac1ac93686cbdbb264aefad41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_5_/plugin/bibibei/bibibei.txt
  • $_5_/plugin/bibibei/plugin.ini
  • bibibei.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    61d1330ac1ac93686cbdbb264aefad41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bibibei.ico
  • ж.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • ȱ¹ٷվ.url