General

  • Target

    XPAntivirus2008.exe

  • Size

    1.3MB

  • MD5

    e979fb2eb504972ed87ad3c825ec6c2c

  • SHA1

    7a927cfa6d413f66da1ae05f668ce85b3547aaf2

  • SHA256

    9d45ae1d8d3749efbe72b24bc20142e8c55b88a0733a45e5fe8579cf24981f33

  • SHA512

    df1b55bff5fdee03cd77d59befe5ccfef555100605f7e9782e0a90e21ad6f67c92bdf925e2844d042c9da48e1c05eb4970460683aebbec2bf5a3f9cf6341bee6

  • SSDEEP

    24576:oFClUXZEi1emUdr7GL6UDG5t1IXQNqXMgmm793HUwiSoD4HN5zg5nv:RlUpENr6LfotWX6+h9iSK8zKnv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • XPAntivirus2008.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillSelf.dll
    .dll windows:4 windows x86 arch:x86

    bb981d54de1208258954ef6a95d1ec2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MachineKey.dll
    .dll windows:4 windows x86 arch:x86

    373a46f2dac5b6d7b5b3f2780d9e54f0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Mutex.dll
    .dll windows:4 windows x86 arch:x86

    a833fbcbd17326d1fe91bba98b26bfd8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/lastpage.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/update.ini
  • $TEMP/pin.vbs
    .vbs
  • $_7_.exe
    .exe windows:4 windows x86 arch:x86

    0dd28c30dea0b829fe2addad09403d7e


    Headers

    Imports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • MFC71ENU.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MachineKey.dll
    .dll windows:4 windows x86 arch:x86

    373a46f2dac5b6d7b5b3f2780d9e54f0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • database.dat
    .zip
  • license.txt
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections