General

  • Target

    b7e17e644866b861f9403f95cf2fc4ea6d3e194637477b2f079a9e90a33c80bf

  • Size

    2.4MB

  • MD5

    27b898cde6fe5916cd519c913c0d4859

  • SHA1

    086d32ef353e9e05f8c1d9b0d499f6cae29d742c

  • SHA256

    b7e17e644866b861f9403f95cf2fc4ea6d3e194637477b2f079a9e90a33c80bf

  • SHA512

    2f67ba8adbb4a74aa8ad941a4d466e5a08e3c1cd8d047f502e9a0b798347b5d8c9711110c0bb65405a01fbd3cd7e6824b54a913d5c9d6684cc27eff241878621

  • SSDEEP

    49152:OhkhAmJjPXAiF7ihPBKnss12m/TvTRVT9yQCZqywomP843Z7hVrU2:OCGmFF7jp1LLvTRKQCVRm5thH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • b7e17e644866b861f9403f95cf2fc4ea6d3e194637477b2f079a9e90a33c80bf
    .exe windows:5 windows x86 arch:x86

    6ad1a6de4d76e6fec19d7929778ce3a5


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    5ebb000a52998bb996312557ab4e30f5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LogEx.dll
    .dll windows:4 windows x86 arch:x86

    549d7b44067bbcdf42bf6a90a80a3a9e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SetupPlugin.dll
    .dll windows:5 windows x86 arch:x86

    8215c4336d9682cb08cbe5f78e292ffe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • APDefault.ini
  • Black.xml
  • CommonWindow.dll
    .dll windows:5 windows x86 arch:x86

    0764b325382af6a0b69e0db821ec6d1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Conflict.xml
    .xml
  • HWID.ini
  • HWID.xml
  • HWID_OURS.ini
  • ICSDHCP.dll
    .dll windows:4 windows x86 arch:x86

    f0d2e9ee5555f95704b20fada179d46e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImageOleCtrl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    ce857f145cbe4c3e87b86cd7cd23a7f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InstallDriver.exe
    .exe windows:5 windows x86 arch:x86

    3ad5ab786e655d857c9526dd3d494ffa


    Code Sign

    Headers

    Imports

    Sections

  • IpLib.dll
    .dll windows:4 windows x86 arch:x86

    37b904f80c242a2d95c62fd6b498e8e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MiniNews.exe
    .exe windows:5 windows x86 arch:x86

    b30a3bff3ec9db770438db02e12674a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RaAPAPI.dll
    .dll windows:4 windows x86 arch:x86

    0b343d327ffb1b702baef11212559baa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Repair_WiFi.exe
    .exe windows:5 windows x86 arch:x86

    e65886a5ba6311201b8f0bdd8d2b1115


    Code Sign

    Headers

    Imports

    Sections

  • RtlIhvOid.dll
    .dll windows:5 windows x86 arch:x86

    fafa17ac87711b607ef79bda4ee2b20f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • RtlLib.dll
    .dll windows:5 windows x86 arch:x86

    7e339aa26db1485c99854c0f800f939c


    Headers

    Imports

    Exports

    Sections