Overview

overview

7

Static

static

3

820ddeadac...04.exe

windows7-x64

7

820ddeadac...04.exe

windows10-2004-x64

7

$1/Tablacu...ff.exe

windows7-x64

3

$1/Tablacu...ff.exe

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/$APPDA...er.exe

windows7-x64

7

$R1/$APPDA...er.exe

windows10-2004-x64

7

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$R1/Tablacus.exe

windows7-x64

4

$R1/Tablacus.exe

windows10-2004-x64

3

$R1/TablacusApp.exe

windows7-x64

1

$R1/TablacusApp.exe

windows10-2004-x64

1

$R1/script...und.js

windows7-x64

3

$R1/script...und.js

windows10-2004-x64

3

$R1/script/common.js

windows7-x64

3

$R1/script/common.js

windows10-2004-x64

3

$R1/script/consts.js

windows7-x64

3

$R1/script/consts.js

windows10-2004-x64

3

$R1/script...g.html

windows7-x64

1

$R1/script...g.html

windows10-2004-x64

1

$R1/script/index.html

windows7-x64

1

$R1/script/index.html

windows10-2004-x64

1

$R1/script/index.js

windows7-x64

3

$R1/script/index.js

windows10-2004-x64

3

$R1/script...n.html

windows7-x64

1

$R1/script...n.html

windows10-2004-x64

1

$R1/script...s.html

windows7-x64

1

$R1/script...s.html

windows10-2004-x64

1

$R1/script/options.js

windows7-x64

3

$R1/script/options.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    820ddeadac342d7f4a6f332706129c04.bin

  • Size

    536KB

  • MD5

    820ddeadac342d7f4a6f332706129c04

  • SHA1

    0fcc201341547be4a9034f81b522e798d9315ec3

  • SHA256

    c92f1e062cb696f5ee34cb9606e54408148ba77e84ac6baeae5abc637259624d

  • SHA512

    4bee3ae8acf304245a8780db6c92f9ba6f9a47e309f23160861d4d83b3488bcd2f02d1b79551eced0943330f936c2b25d19e619766d1037bb03f9833090fe92b

  • SSDEEP

    12288:uIDelIt9VctcNqOQ/3AjTr7vHSujL6Tcrm2:5Slc9mtcN0/3YrziTMF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 820ddeadac342d7f4a6f332706129c04.bin
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $1/TablacusInstallerStuff.exe
    .exe windows:6 windows x86 arch:x86

    3ba68c2c751552c3742a3e87d2ecfff2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/$APPDATA/TablacusApp/uninstaller.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $R1/Tablacus.exe
    .exe windows:5 windows x86 arch:x86

    8d3fcb29b341b50d5a29b25cb6dc7da7


    Headers

    Imports

    Sections

  • $R1/TablacusApp.exe
    .exe windows:5 windows x86 arch:x86

    0a52fd9e577b60aafa2a7457963a94be


    Headers

    Imports

    Sections

  • $R1/config/window.xml
    .xml
  • $R1/init/addons.xml
    .xml
  • $R1/init/key.xml
    .xml
  • $R1/init/menus.xml
    .xml
  • $R1/init/mouse.xml
    .xml
  • $R1/lang/de.xml
  • $R1/lang/en.xml
  • $R1/lang/es.xml
  • $R1/lang/fr.xml
  • $R1/lang/it.xml
  • $R1/lang/ja.xml
  • $R1/lang/pt.xml
  • $R1/lang/ru.xml
  • $R1/lang/zh.xml
  • $R1/lang/zh_cn.xml
  • $R1/layout/1tab.xml
    .xml
  • $R1/layout/4tabs.xml
    .xml
  • $R1/layout/bottom_tab.xml
    .xml
  • $R1/layout/h2tabs.xml
    .xml
  • $R1/layout/left_tab.xml
    .xml
  • $R1/layout/right_tab.xml
    .xml
  • $R1/layout/tree_1tab.xml
    .xml
  • $R1/layout/tree_2tabs.xml
    .xml
  • $R1/layout/v2tabs.xml
    .xml
  • $R1/layout/vertical_tab.xml
    .xml
  • $R1/readme.txt
  • $R1/script/background.js
    .js
  • $R1/script/common.js
    .js
  • $R1/script/consts.js
    .js
  • $R1/script/dialog.html
    .html
  • $R1/script/index.css
  • $R1/script/index.html
    .html
  • $R1/script/index.js
    .js
  • $R1/script/location.html
    .html
  • $R1/script/options.css
  • $R1/script/options.html
    .html
  • $R1/script/options.js
    .js