General

  • Target

    DEMO.exe

  • Size

    9.2MB

  • MD5

    f07d28cacd668ec1dc95885625236c0a

  • SHA1

    b1a75a44521483cabf8d9512beaeaca97613d5f0

  • SHA256

    8af7f0f58130c8f765242a5eaacc2b75144be5cf6b089669c2e03994acdcc874

  • SHA512

    1e8836ceee44e03e998814ade818aa0ed01125206d448758eff2aa93c92de85086c4ef9539e82109753fe44250e47335a77c5593b492485c84af96d1aa8518d1

  • SSDEEP

    196608:vJgaBbj7thzK7h/+BY1hDqQ7KiyCTZu70Sl38qOCw:OaB37W7h/+OrDjVTOw

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • DEMO.exe
    .exe windows:4 windows x86 arch:x86

    e037327a20e5c7520a608e1a32477275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Splash_logon.bmp
  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    c0d4e5fadc92d88e6603d2d1c1d8421c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Alert.xml
  • AutoUpdateClient.exe
    .exe windows:5 windows x86 arch:x86

    5f4df69c34523a07d4bf5618d00aba9a


    Code Sign

    Headers

    Imports

    Sections

  • Baskets/BasketLoadBlank.csv
  • Baskets/BasketLoadExample.csv
  • Baskets/LONG_POSTION.csv
  • Baskets/OILPair.csv
  • Baskets/OILPair.txt
  • Baskets/SELL_POSITION.csv
  • Baskets/StopOrderExample.csv
  • Baskets/newstop.csv
  • Baskets/stopTest.csv
  • Baskets/t1.bsk
  • Baskets/t2.bsk
  • Baskets/test.bsk
  • CfgSet.dll
    .dll windows:5 windows x86 arch:x86

    6ef8b4a1d954058bf2906eff96f1d565


    Headers

    Imports

    Exports

    Sections

  • Chart.dll
    .dll windows:5 windows x86 arch:x86

    e403ac07475d8def36fee36025045054


    Headers

    Imports

    Exports

    Sections

  • Config.cfg
  • ConfigEx.cfg
  • DASLP.LP
  • DEMO.bmp
  • DasGuiLib.dll
    .dll windows:5 windows x86 arch:x86

    35b76c79efa8bd5fda4588d49223d7b4


    Headers

    Imports

    Exports

    Sections

  • DasTrader.exe
    .exe windows:5 windows x86 arch:x86

    3b4cd2c49888433709671aa4299d6ffc


    Code Sign

    Headers

    Imports

    Sections

  • HotKey.pdf
    .pdf
    • http://finance.yahoo.com/q/pr?s=%SYMB%

    • http://www.nasdaqtrader.com/trader/tradingservices/productservices/productdescriptions/inet/rash_strategy.pdf

  • Hotkey.htk
  • NASDAQBell.mp3
  • NYSEBell.mp3
  • ReleaseNote.html
  • Report.mdb
  • SkinMagic.dll
    .dll windows:5 windows x86 arch:x86

    56618a02ff7a1594a1add5d45484bf82


    Headers

    Imports

    Exports

    Sections

  • ToolBar.dll
    .dll windows:5 windows x86 arch:x86

    1cb458a46270236410a3bb05c723bd6b


    Headers

    Imports

    Exports

    Sections

  • UpdateClient.exe
    .exe windows:5 windows x86 arch:x86

    c2d630ac9535b12fcfb621f83b3580a1


    Code Sign

    Headers

    Imports

    Sections

  • XCrashReport.exe
    .exe windows:5 windows x86 arch:x86

    5ebc4301d015683e9a49cc6b2207c7c2


    Code Sign

    Headers

    Imports

    Sections

  • daszip.dll
    .dll windows:5 windows x86 arch:x86

    06e9952b890d946b67158490430208f0


    Headers

    Imports

    Exports

    Sections

  • default.dsk
  • disclaimer.jpg
    .jpg
  • hotkey.xml
    .xml
  • mfc100.dll
    .dll windows:5 windows x86 arch:x86

    c45c50a45dcc5e647441103ee242c873


    Code Sign

    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • scanner.xml
    .xml
  • theme/DAS_Blue.bmp
  • theme/DAS_Blue.smf
  • theme/DAS_Blue32.smf
  • theme/DAS_Dark.bmp
  • theme/DAS_Dark.smf
  • theme/DAS_Dark32.smf
  • theme/DAS_Default.bmp
  • uninstall.exe.nsis
  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    2d3ee679b3fa7146dcc780f76415ad2e


    Headers

    Imports

    Exports

    Sections