General

  • Target

    eea566d5c3081cb0c3dc14b41a4c90108a74356e05bbe404b7db92fa12c4cb19

  • Size

    3.8MB

  • MD5

    31db4c94bba70cb7ae2f10ed27414491

  • SHA1

    1264ab69287204861ace27cae21e64198fdd4cf5

  • SHA256

    eea566d5c3081cb0c3dc14b41a4c90108a74356e05bbe404b7db92fa12c4cb19

  • SHA512

    0ed5c4b0190d4243fbef65fee08b98ffe669397174d0cf3a7746ee92ff34d16e20cbf8aaf350ca47c1be18f6652ed6c16b33a27e6d13922bd63211e4168971f5

  • SSDEEP

    98304:wglUNZJf6qfgDZTOyYICyFrRZbkFMVfyezxqWrlB9V4UTpK0dryXfW:wmUN7f6cCTeICklFVK6LV4g9twO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • eea566d5c3081cb0c3dc14b41a4c90108a74356e05bbe404b7db92fa12c4cb19
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/K8NsisMiniExtend.dll
    .dll windows:4 windows x86 arch:x86

    184360b632542de035fbd94f7023f592


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • BaseCommon.dll
    .dll windows:4 windows x86 arch:x86

    ea464b631c93a389e79c6081f314c608


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserUtils.dll
    .dll windows:4 windows x86 arch:x86

    b63ba85812d0897f102d4645eb8d691d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CrashReport.exe
    .exe windows:4 windows x86 arch:x86

    34c3ae292ec161772ac70f01a4b7d19e


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • QLBox.exe
    .exe windows:4 windows x86 arch:x86

    19067b2ec505c0634c37280bdf9b1dfc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UIRender.dll
    .dll windows:4 windows x86 arch:x86

    eb92dca5de2f5d70f1e42a06a84fde1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $TEMP/UUOnlineSetup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • UrlEncrypt.dll
    .dll windows:4 windows x86 arch:x86

    85653f8d360849f55222772a8861f2d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UrlParser.dll
    .dll windows:4 windows x86 arch:x86

    a6252c82cd86791d0b65e532b6b7b6f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • opencv_core249.dll
    .dll windows:4 windows x86 arch:x86

    401348ad81135224641c3221952e194f


    Headers

    Imports

    Exports

    Sections

  • opencv_imgproc249.dll
    .dll windows:4 windows x86 arch:x86

    8970a262d46f64338cac94c5b3a40d66


    Headers

    Imports

    Exports

    Sections

  • tool/BaseCommon.dll
    .dll windows:4 windows x86 arch:x86

    ea464b631c93a389e79c6081f314c608


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/Microsoft.VC80.CRT.manifest
  • tool/UIRender.dll
    .dll windows:4 windows x86 arch:x86

    eb92dca5de2f5d70f1e42a06a84fde1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tool/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • tool/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections