General

  • Target

    SecuriteInfo.com.BScope.Worm.Mytob.4760.11059.exe

  • Size

    6.4MB

  • MD5

    a25e2a5da175218841fbeed5f3c77324

  • SHA1

    0431a669d682c2af76732f2c0d24ebb49766ad86

  • SHA256

    64878ab75cd6548d7dfb7f824d9b926c7ff0e30318c6c8af0bcafe9a159b358f

  • SHA512

    ce88ff919bd8fd9d8240aeac08e32ec3675b211b8cf90744a44641e552c876a902ed4c7536558b9cd8491b4c124d0cc0656ea4592d13e6651d4d12ec0d91d1bc

  • SSDEEP

    196608:fa2hdTMw4f36hhHxJZ2aCzMRcXHvjBQIDhIalSkQtdcvcLUSD:f/tnZVwMQHvi8E11D

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • SecuriteInfo.com.BScope.Worm.Mytob.4760.11059.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/README.md
  • $PLUGINSDIR/KICA/firefox-add-certs/add-certs.cmd
    .cmd .vbs
  • $PLUGINSDIR/KICA/firefox-add-certs/bin/COPYING
  • $PLUGINSDIR/KICA/firefox-add-certs/bin/LICENSE
  • $PLUGINSDIR/KICA/firefox-add-certs/bin/README.md
  • $PLUGINSDIR/KICA/firefox-add-certs/bin/certutil.exe
    .exe windows:5 windows x86 arch:x86

    54ad3a463e979be9777a9c1b4b621580


    Headers

    Imports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    4d3380cdbdb7eefd5cbcaa19c279f8e7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/nspr4.dll
    .dll windows:6 windows x86 arch:x86

    64781e2d3963d5ee9eab772c65d80fb7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/nss3.dll
    .dll windows:6 windows x86 arch:x86

    e8639d9d4cdcf5c8aacb5a14c0691e42


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/nssckbi.dll
    .dll windows:6 windows x86 arch:x86

    b5dd8280a5743c20bb94b7561f0f3c88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/nssdbm3.dll
    .dll windows:6 windows x86 arch:x86

    fb09273820d3f06630824e01c95a8023


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/nssutil3.dll
    .dll windows:6 windows x86 arch:x86

    93df069a539ebae935811f1a931b3e88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/plc4.dll
    .dll windows:6 windows x86 arch:x86

    0bda4b4e468aef51dcef11a4a80c2013


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/plds4.dll
    .dll windows:6 windows x86 arch:x86

    be9f272b9d2aa25b2ea30caff579bee0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/smime3.dll
    .dll windows:6 windows x86 arch:x86

    1ccc99a79d2fdb267d3465a58eb7ccda


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    792583364ed82124375604ad797768fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    d737ec21c2c1c2a6d0b67d6c970af864


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/bin/ssl3.dll
    .dll windows:6 windows x86 arch:x86

    56738d2693f9bc590cf14585609a3360


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KICA/firefox-add-certs/cacert/CACert_RootDistributionLicense.txt
  • $PLUGINSDIR/KICA/firefox-add-certs/cacert/RootCA.pem
  • $PLUGINSDIR/KICA/firefox-add-certs/db/empty/cert8.db
  • $PLUGINSDIR/KICA/firefox-add-certs/db/empty/cert9.db
  • $PLUGINSDIR/KICA/firefox-add-certs/db/empty/key3.db
  • $PLUGINSDIR/KICA/firefox-add-certs/db/empty/key4.db
  • $PLUGINSDIR/KICA/firefox-add-certs/db/empty/secmod.db
  • $PLUGINSDIR/KICA/root-cert/KICA NXS Root CA.der
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    8abe046ef411de4d3e6e831b6b1ee264


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    a49b0342971aa199fc6349725b90146d


    Headers

    Imports

    Exports

    Sections

  • Common/Setup.exe
    .exe windows:5 windows x86 arch:x86

    44e8ac02a21e9a72d30407d88b5ae4c7


    Code Sign

    Headers

    Imports

    Sections

  • Common/kpmsvc/config.ini
  • Common/kpmsvc/kpmcnt.exe
    .exe windows:5 windows x86 arch:x86

    3d3ea90870f71eb8be6a98e3560053d0


    Code Sign

    Headers

    Imports

    Sections

  • Common/kpmsvc/kpmsvc.exe
    .exe windows:5 windows x86 arch:x86

    abefdc83be98544e9e9a726d56273d70


    Code Sign

    Headers

    Imports

    Sections

  • SecuKitNXS/KC_Crypt32.dll
    .dll windows:6 windows x86 arch:x86

    5225490ef74e07d8e53bfade9ff865e1


    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/KICADialog.dll
    .dll windows:5 windows x86 arch:x86

    c3049301ec7daa380ee103f89c1112ab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/NXError.dll
    .dll windows:6 windows x86 arch:x86

    7f5a86a543e7ac4c14de78beea709785


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/NXErrorEN.dll
    .dll windows:5 windows x86 arch:x86

    7f5a86a543e7ac4c14de78beea709785


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/NXIssueModule.dll
    .dll windows:6 windows x86 arch:x86

    aca6428d07e7bab6f6eac6b5e2cd171f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/NXModule.dll
    .dll windows:5 windows x86 arch:x86

    6489dc18e922066591591a9dce4df9bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/NXUnInst.exe.nsis
  • SecuKitNXS/NXUtil.dll
    .dll windows:5 windows x86 arch:x86

    0241671eade5b969f6d004f7d1f80235


    Code Sign

    Headers

    Imports

    Sections

  • SecuKitNXS/NXUtil2.dll
    .dll windows:5 windows x86 arch:x86

    02b4c20bef729db7c5ef5cb229e15e92


    Code Sign

    Headers

    Imports

    Sections

  • SecuKitNXS/kc_crypt32.cfg
  • SecuKitNXS/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/nsldap32v60.dll
    .dll windows:6 windows x86 arch:x86

    74e9f2a068c94cf1adb9f90f7aa4336f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SecuKitNXS/secukitNX.dll
    .dll windows:5 windows x86 arch:x86

    c2fd770d3854a1066bed153feb7eba2f


    Code Sign

    Headers

    Imports

    Exports

    Sections