General

  • Target

    e10e53b69f3cf5aa2da1c451d3cbd749

  • Size

    5.3MB

  • MD5

    e10e53b69f3cf5aa2da1c451d3cbd749

  • SHA1

    8f7aba1a4cf900be323d90ee55313e4133ac1ad3

  • SHA256

    ad272132970772ec9c1cf693f5aaee542a68c0f849d1b2eaaeebd0abf78e567a

  • SHA512

    25bf903764072a9f744f10edea0fbf245978385e9e84dbae72ac8bc88d9a1bbf9cc046179f443e5f2aba67efada979015cafc521f1651c2cb7381746601220c6

  • SSDEEP

    98304:zRaR24P62XGECl+ZheBLf/K18aJUwIikPU8BDWEIGtuE4N7oDH6kMYBDmag76cCi:zRa0W62XGECUZhedfSrk8kDsG60DakMn

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e10e53b69f3cf5aa2da1c451d3cbd749
    .rar
  • Dictionaries/Roget.adt
  • Dictionaries/american.adm
  • Dictionaries/autocorrect.adu
  • HtmlTables.def
  • PluginsAndCOM.zip
    .zip
  • PluginsAndCOM/COM-Interface/VB5/0-AppVersion/Form1.frm
    .vbs
  • PluginsAndCOM/COM-Interface/VB5/0-AppVersion/Project1.vbp
  • PluginsAndCOM/COM-Interface/VB5/0-AppVersion/Project1.vbw
  • PluginsAndCOM/COM-Interface/VB5/1-Files/Form1.frm
    .vbs
  • PluginsAndCOM/COM-Interface/VB5/1-Files/Form1.frx
  • PluginsAndCOM/COM-Interface/VB5/1-Files/Project1.vbp
  • PluginsAndCOM/COM-Interface/VB5/1-Files/Project1.vbw
  • PluginsAndCOM/COM-Interface/VB5/2-Nodes/Form1.frm
    .vbs
  • PluginsAndCOM/COM-Interface/VB5/2-Nodes/Form1.frx
  • PluginsAndCOM/COM-Interface/VB5/2-Nodes/Project1.vbp
  • PluginsAndCOM/COM-Interface/VB5/2-Nodes/Project1.vbw
  • PluginsAndCOM/COM-Interface/VB5/3-Data/Form1.frm
    .vbs
  • PluginsAndCOM/COM-Interface/VB5/3-Data/Form1.frx
  • PluginsAndCOM/COM-Interface/VB5/3-Data/Project1.vbp
  • PluginsAndCOM/COM-Interface/VB5/3-Data/Project1.vbw
  • PluginsAndCOM/Plugins/Demo/DemoPlug.dll
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PluginsAndCOM/Plugins/Demo/DemoPlug.dpr
  • PluginsAndCOM/Plugins/Demo/DemoPlug.res
  • PluginsAndCOM/Plugins/Demo/DemoPlug1.RES
  • PluginsAndCOM/Plugins/Demo/fComment.dfm
  • PluginsAndCOM/Plugins/Demo/fComment.pas
  • PluginsAndCOM/Plugins/Demo/fDocProp.dfm
  • PluginsAndCOM/Plugins/Demo/fDocProp.pas
  • PluginsAndCOM/Plugins/Demo/fList.dfm
  • PluginsAndCOM/Plugins/Demo/fList.pas
  • PluginsAndCOM/Plugins/Demo/fTree.dfm
  • PluginsAndCOM/Plugins/Demo/fTree.pas
  • Reports/Task.rep
  • Reports/contacts.rep
  • Reports/contacts3.rep
  • Reports/contactsSimple.rep
  • Reports/events.rep
  • Reports/eventsTable.rep
  • Reports/notes.rep
  • Reports/notes2.rep
  • Reports/notes3.rep
  • Reports/notesClearText.rep
  • Reports/passwords.rep
  • Reports/passwords2.rep
  • Reports/passwordsTable.rep
  • Reports/planner.rep
  • Reports/reports.txt
  • Reports/seltext.rep
  • Reports/taskTable.rep
  • Reports/tasksCard.rep
  • Reports/today.rep
  • Reports/todayEvents.rep
  • Reports/todayTask.rep
  • Reports/tree.rep
  • RestoreSettings.bat
  • SaveSettings.bat
  • Speaker.txt
  • WinOrganizer.chm
    .chm
  • WinOrganizer.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • WinOrganizer.gso
  • alarm-na.wav
  • alarm.wav
  • file_id.diz
  • history.txt
  • important.txt
  • license.txt
  • nls/English.nls
  • nls/Simplified Chinese.nls
  • order.txt
  • readme.txt
  • 安装说明.url
    .url