General

  • Target

    ettercap-NG-0.7.3-win32.exe

  • Size

    3.3MB

  • MD5

    810c9aef39923b0a14b1386f66cee301

  • SHA1

    ef7adffb7bd9421403241aac3e52691c0ea49a6c

  • SHA256

    65f859fe694f62477d598d9425d0154f3ba74bf6c448fed2429a0ed7dce5e7ef

  • SHA512

    265fa30d19f68598bc41f89158e0c992bd1cb2e42f97944f596be6c5e24cae56447eb67bbb44b9b789d6d6c8925b91d6438217e9f966c855a32163c83d6b4997

  • SSDEEP

    98304:P0G/3PVkdK48zwOLYcI7ALTVsEezVUVaYWH:N/9Y7BD7ALTVsEGV0aj

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 54 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ettercap-NG-0.7.3-win32.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    aebc3107701149edfc563b8db7a789fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/eNG-message.ini
  • $PLUGINSDIR/eNG-radiobuttons.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9632e80596371cfa7f563f680f3c4498


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • doc/etter.conf.pdf
    .pdf
    • http://input.store

  • doc/ettercap.pdf
    .pdf
    • http://tmp.new

    • http://feature.you

    • http://ettercap.sf.net

    • http://antifork.org

    • http://ettercap.sourceforge.net/download/CVScvs

    • http://cvs.ettercap.sf.net

    • http://users.sourceforge.net

    • http://etter-cap.sourceforge.net/forum/

  • doc/ettercap_curses.pdf
    .pdf
  • doc/ettercap_plugins.pdf
    .pdf
    • http://mail.host

    • http://razor.bindview.com/publish/advi-sories/adv_NAPTHA.html

    • http://www.phrack.org/show.php?p=56&a=10

    • http://HERT.gw

  • doc/etterfilter.pdf
    .pdf
    • http://A.data

    • http://DATA.data

    • http://DECODED.data

    • http://antifork.org

  • doc/etterlog.pdf
    .pdf
    • http://antifork.org

  • etc/fonts/fonts.conf
    .xml
  • etc/fonts/fonts.dtd
  • etc/gtk-2.0/gdk-pixbuf.loaders
  • etc/gtk-2.0/gtk.immodules
  • etc/gtk-2.0/gtkrc
  • etc/pango/pango.aliases
  • etc/pango/pango.modules
  • ettercap.exe
    .exe windows:4 windows x86 arch:x86

    a78ab192303e446b241e7b95aacc8084


    Headers

    Imports

    Exports

    Sections

  • etterfilter.exe
    .exe windows:4 windows x86 arch:x86

    7d9f2f5caadfaaa7dfbdba17769e6013


    Headers

    Imports

    Exports

    Sections

  • etterlog.exe
    .exe windows:4 windows x86 arch:x86

    bcbf5623dbbef5e718c02872368e2b6f


    Headers

    Imports

    Exports

    Sections

  • iconv.dll
    .dll windows:4 windows x86 arch:x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • intl.dll
    .dll windows:4 windows x86 arch:x86

    0c6f6588990852ca57e13bde10f5053b


    Headers

    Imports

    Exports

    Sections

  • lib/ec_arp_cop.dll
    .dll windows:4 windows x86 arch:x86

    3456ae8ea352f6ce086a195bf7817c4a


    Headers

    Imports

    Exports

    Sections

  • lib/ec_chk_poison.dll
    .dll windows:4 windows x86 arch:x86

    0fc03362f23e0d510462ca9cb78d01a3


    Headers

    Imports

    Exports

    Sections

  • lib/ec_dns_spoof.dll
    .dll windows:4 windows x86 arch:x86

    322ef9c103b8f222ee29b0ab514ef2d7


    Headers

    Imports

    Exports

    Sections

  • lib/ec_dos_attack.dll
    .dll windows:4 windows x86 arch:x86

    201a2c4505be6a6ed4d62c6ef4a0535c


    Headers

    Imports

    Exports

    Sections

  • lib/ec_dummy.dll
    .dll windows:4 windows x86 arch:x86

    496ad9c2795a4efd71637c83d364e377


    Headers

    Imports

    Exports

    Sections

  • lib/ec_find_conn.dll
    .dll windows:4 windows x86 arch:x86

    40970a766a241d499b799d006adcf229


    Headers

    Imports

    Exports

    Sections

  • lib/ec_find_ettercap.dll
    .dll windows:4 windows x86 arch:x86

    b17aee71ae62e9b96837d41a46f20c59


    Headers

    Imports

    Exports

    Sections

  • lib/ec_find_ip.dll
    .dll windows:4 windows x86 arch:x86

    6f870cfba17bd9ca15d3222c4ce57e6f


    Headers

    Imports

    Exports

    Sections

  • lib/ec_finger.dll
    .dll windows:4 windows x86 arch:x86

    f699613a16eecb713c5b61a32a8886e7


    Headers

    Imports

    Exports

    Sections

  • lib/ec_finger_submit.dll
    .dll windows:4 windows x86 arch:x86

    f6697248dc5e7e34b0727ef8c93e4431


    Headers

    Imports

    Exports

    Sections

  • lib/ec_gre_relay.dll
    .dll windows:4 windows x86 arch:x86

    4e94d9d9fa2485f1666f1ddad6b41438


    Headers

    Imports

    Exports

    Sections

  • lib/ec_gw_discover.dll
    .dll windows:4 windows x86 arch:x86

    bd1054450ac93bf382c5006cfe89e456


    Headers

    Imports

    Exports

    Sections

  • lib/ec_isolate.dll
    .dll windows:4 windows x86 arch:x86

    1cefc744a5ef7baad63bd44bb65ce4b9


    Headers

    Imports

    Exports

    Sections

  • lib/ec_link_type.dll
    .dll windows:4 windows x86 arch:x86

    63a67058c684330ecb482668b685fb8b


    Headers

    Imports

    Exports

    Sections

  • lib/ec_pptp_chapms1.dll
    .dll windows:4 windows x86 arch:x86

    1f86ffe86811a0c677d8f09536f16fc4


    Headers

    Imports

    Exports

    Sections

  • lib/ec_pptp_clear.dll
    .dll windows:4 windows x86 arch:x86

    3893d70afc58efe91b0a0fb9d590e4ea


    Headers

    Imports

    Exports

    Sections

  • lib/ec_pptp_pap.dll
    .dll windows:4 windows x86 arch:x86

    1f86ffe86811a0c677d8f09536f16fc4


    Headers

    Imports

    Exports

    Sections

  • lib/ec_pptp_reneg.dll
    .dll windows:4 windows x86 arch:x86

    b1732e9f5d2774b208a5635df315af96


    Headers

    Imports

    Exports

    Sections

  • lib/ec_rand_flood.dll
    .dll windows:4 windows x86 arch:x86

    9aff07824668def470432070853f447e


    Headers

    Imports

    Exports

    Sections

  • lib/ec_remote_browser.dll
    .dll windows:4 windows x86 arch:x86

    670e84fdc6255929faefab28e7a0331b


    Headers

    Imports

    Exports

    Sections

  • lib/ec_reply_arp.dll
    .dll windows:4 windows x86 arch:x86

    14ba2caaf1af8bd6336114ed1879d930


    Headers

    Imports

    Exports

    Sections

  • lib/ec_scan_poisoner.dll
    .dll windows:4 windows x86 arch:x86

    3e56ea53025e330be6d26969a16642fe


    Headers

    Imports

    Exports

    Sections

  • lib/ec_search_promisc.dll
    .dll windows:4 windows x86 arch:x86

    4432df3bb9b53ebc7c9a9524695ebed0


    Headers

    Imports

    Exports

    Sections

  • lib/ec_smb_clear.dll
    .dll windows:4 windows x86 arch:x86

    6a14e3252c86e4f1e46318f92f66987a


    Headers

    Imports

    Exports

    Sections

  • lib/ec_smb_down.dll
    .dll windows:4 windows x86 arch:x86

    289b093af9a885a7aa49eff300ec0a1c


    Headers

    Imports

    Exports

    Sections

  • lib/ec_stp_mangler.dll
    .dll windows:4 windows x86 arch:x86

    1da309498cf6ddc9d43979cd8b5baca2


    Headers

    Imports

    Exports

    Sections

  • lib/gtk-2.0/2.4.0/engines/libwimp.dll
    .dll windows:4 windows x86 arch:x86

    d316853c4f2a41c03ad3eb0ee4cdd208


    Headers

    Imports

    Exports

    Sections

  • lib/gtk-2.0/2.4.0/loaders/libpixbufloader-ico.dll
    .dll windows:4 windows x86 arch:x86

    1a9ae1755e5e050ef95ab854d2a3a8ea


    Headers

    Imports

    Exports

    Sections

  • lib/gtk-2.0/2.4.0/loaders/libpixbufloader-png.dll
    .dll windows:4 windows x86 arch:x86

    0dbde5bfadf8665ef3a26fa904669980


    Headers

    Imports

    Exports

    Sections

  • lib/pango/1.4.0/modules/pango-basic-win32.dll
    .dll windows:4 windows x86 arch:x86

    0c933fd3c49ffbe3dcb1ee54ee075a69


    Headers

    Imports

    Exports

    Sections

  • libatk-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    7b1b43875119aa5e1833c0f10b78dbf1


    Headers

    Imports

    Exports

    Sections

  • libgdk-win32-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    7a2b4f3c6d213cc624a7aced0ec8c675


    Headers

    Imports

    Exports

    Sections

  • libgdk_pixbuf-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    7f9e089afe6013a596cf79985af90a13


    Headers

    Imports

    Exports

    Sections

  • libglib-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    a881c7f8b2f3bce18cb5d571d2476995


    Headers

    Imports

    Exports

    Sections

  • libgmodule-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    63cd2368ca1c7ea3c9fca27b6b42a9bb


    Headers

    Imports

    Exports

    Sections

  • libgobject-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    2b2a2e8064795cff19aa084d6e5f6b91


    Headers

    Imports

    Exports

    Sections

  • libgthread-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    7a1be53f52b51fc8066cda709fabed26


    Headers

    Imports

    Exports

    Sections

  • libgtk-win32-2.0-0.dll
    .dll windows:4 windows x86 arch:x86

    10ec9481252ae228e99a33d5e465ab19


    Headers

    Imports

    Exports

    Sections

  • libiconv-2.dll
    .dll windows:4 windows x86 arch:x86

    e7aa0aeef61e4ca89f4b87b602f40e02


    Headers

    Imports

    Exports

    Sections

  • libnet.dll
    .dll windows:4 windows x86 arch:x86

    dd29dddd95b8811031bcb7b50d1b2178


    Headers

    Imports

    Exports

    Sections

  • libpango-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    a6a132852bca794262565ab7b858d6b0


    Headers

    Imports

    Exports

    Sections

  • libpangowin32-1.0-0.dll
    .dll windows:4 windows x86 arch:x86

    1d73d7dfa992277ffad5d6d479e7b06c


    Headers

    Imports

    Exports

    Sections

  • libpng12.dll
    .dll windows:4 windows x86 arch:x86

    642ca9f501a9696749c748047fac0ed8


    Headers

    Imports

    Exports

    Sections

  • pthreadGC.dll
    .dll windows:4 windows x86 arch:x86

    74e5c6af9a7df5fbd48f2990112825be


    Headers

    Imports

    Exports

    Sections

  • share/Makefile.am
  • share/Makefile.in
  • share/etter.conf
  • share/etter.dns
  • share/etter.fields
  • share/etter.filter
  • share/etter.filter.examples
  • share/etter.filter.kill
  • share/etter.filter.pcre
  • share/etter.filter.ssh
  • share/etter.finger.mac
  • share/etter.finger.os
  • share/etter.mime
  • share/etter.services
  • share/etter.ssl.crt
  • share/ettercap.png
    .png
  • share/etterfilter.cnt
  • share/etterfilter.tbl
  • share/etterlog.dtd
  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    246d07709f69016303b7de78a85e209a


    Headers

    Imports

    Exports

    Sections