General

  • Target
    Limewire_5.5.16.exe
  • Size 28.8MB
  • Sample240428-th496sbf21
  • SHA256 f6ca4c41fceab0cb136ad06eaa0a4c82e209948238e6873ed7ea4022ad41c54b
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • Limewire_5.5.16.exe
    .exe 28.8MB
  • $4/Uninstall LimeWire.lax
    3KB
  • $PLUGINSDIR/Banner.dll
    .dll 4KB
  • $PLUGINSDIR/ExtractDLLEx.dll
    .dll 7KB
  • $PLUGINSDIR/FindProcDLL.dll
    .dll 3KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/KillProcDLL.dll
    .dll 4KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/LockedList.dll
    .dll 18KB
  • $PLUGINSDIR/NSISdl.dll
    .dll 12KB
  • $PLUGINSDIR/RunProcess.dll
    .dll 180KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $TEMP/btn_search.png
    .png 623B
  • $TEMP/config.xml
    .xml 81KB
  • $TEMP/execNoWindow.exe
    .exe 22KB
  • $TEMP/install_flash_player_10_plugin.msi
    .msi 2.8MB
  • $TEMP/jrestub.exe
    .exe 898KB
  • $TEMP/limewire_logo.png
    .png 995B
  • $TEMP/msvcr71.dll
    .dll 340KB
  • $TEMP/toolbar.exe
    .exe 2.7MB
  • $TEMP/toolbarChecker.exe
    .exe 242KB
  • $TEMP/toolbar_screenshot.bmp
    93KB
  • $TEMP/unpack200.exe
    .exe 124KB
  • COPYING
    17KB
  • LimeWire.exe
    .exe 492KB
  • LimeWire.ico
    24KB
  • SOURCE
    264B
  • data.ser
    358B
  • inspection.props
    23KB
  • lib/JMediaFoundation.dll
    .dll 12KB
  • lib/LimeWire.ico
    24KB
  • lib/Microsoft.VC90.CRT.manifest
    .xml 524B
  • lib/PackedJars.7z
    14.3MB
  • lib/SystemUtilities.dll
    .dll 88KB
  • lib/SystemUtilitiesA.dll
    .dll 84KB
  • lib/autoupdate-windows.exe
    .exe 5.3MB
  • lib/avg/ATL80.dll
    .dll 94KB
  • lib/avg/Microsoft.VC80.ATL.manifest
    .xml 465B
  • lib/avg/Microsoft.VC80.CRT.manifest
    1KB
  • lib/avg/avgcorex.dll
    .dll 2.0MB
  • lib/avg/avgsdk.dll
    .dll 337KB
  • lib/avg/avgsdkcom.dll
    .dll 64KB
  • lib/avg/avgsdkupd.dll
    .dll 156KB
  • lib/avg/msvcr80.dll
    .dll 612KB
  • lib/jacob-1.15-M1-lw-x86.dll
    .dll 156KB
  • lib/jdic.dll
    .dll 108KB
  • lib/jdshow.dll
    .dll 15KB
  • lib/log4j.properties
    6KB
  • lib/msvcm90.dll
    .dll 219KB
  • lib/msvcp90.dll
    .dll 555KB
  • lib/msvcr90.dll
    .dll 640KB
  • lib/torrent-wrapper.dll
    .dll 2.2MB
  • pmf.ico
    3KB
  • root/magnet10/badge.img
    .gif 830B
  • root/magnet10/canHandle.img
    .gif 830B
  • root/magnet10/limewire.gif
    211B
  • root/magnet10/options.js
    .js 554B
  • root/magnet10/silentdetect.js
    157B
  • spacer.gif
    .gif 49B
  • uninstall.exe.nsis
    83KB

Limewire_5.5.16.exe

  • IMPHASH 7fa974366048f9c551ef45714595665e
  • SHA256 f6ca4c41fceab0cb136ad06eaa0a4c82e209948238e6873ed7ea4022ad41c54b
  • MD5 SHA1 SHA512 SSDEEP
Password
123

PE Signature issue

Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths