General

  • Target

    9f9b912f4685dfda0e8369d5562952c7783d78acccf4dba63a0061ac6df01a51

  • Size

    1.9MB

  • MD5

    5db05311175e28ebfd80611e5a5016c4

  • SHA1

    367550fcb9710ce653d020ddd93ec5e60a5d566b

  • SHA256

    9f9b912f4685dfda0e8369d5562952c7783d78acccf4dba63a0061ac6df01a51

  • SHA512

    663fa4d4ddb237bc1a0c171516b68e99b51b9a8d2330d7ef490a01a18038f2d0aec0bd38e4c8e49e0c60f15a32dde799cf970a303c941018b5daf196eb472422

  • SSDEEP

    24576:wmDPtuhB06xGmgGYU5Pdse/7rD07lUhMfZRM3HwApleEybCExj5wESE2FnfHgslB:wqIxGrGYyhrYJUGfZC3wA6EylfwEaFWs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9f9b912f4685dfda0e8369d5562952c7783d78acccf4dba63a0061ac6df01a51
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • SogouSoftware.exe
    .exe windows:5 windows x86 arch:x86

    4ea98a9b310d1ebb5457a421af7ab97f


    Code Sign

    Headers

    Imports

    Sections

  • SogouSoftwareLoader.dll
    .dll windows:5 windows x86 arch:x86

    120fcd21b3534709ebce3d066057f3de


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • crash/.svn/all-wcprops
  • crash/.svn/entries
  • crash/.svn/format
  • crash/.svn/prop-base/ExceptionReport.exe.svn-base
  • crash/.svn/text-base/ExceptionReport.exe.svn-base
    .exe windows:4 windows x86 arch:x86

    26bcc0deaab46f5ea92fe977e8878322


    Code Sign

    Headers

    Imports

    Sections

  • crash/ExceptionReport.exe
    .exe windows:4 windows x86 arch:x86

    26bcc0deaab46f5ea92fe977e8878322


    Code Sign

    Headers

    Imports

    Sections

  • download/download/.svn/all-wcprops
  • download/download/.svn/entries
  • download/download/.svn/format
  • download/download/.svn/prop-base/MiniTPFw.exe.svn-base
  • download/download/.svn/prop-base/MiniThunderPlatform.exe.svn-base
  • download/download/.svn/prop-base/ThunderFW.exe.svn-base
  • download/download/.svn/prop-base/atl71.dll.svn-base
  • download/download/.svn/prop-base/dl_peer_id.dll.svn-base
  • download/download/.svn/prop-base/download_engine.dll.svn-base
  • download/download/.svn/prop-base/msvcp71.dll.svn-base
  • download/download/.svn/prop-base/msvcr71.dll.svn-base
  • download/download/.svn/prop-base/zlib1.dll.svn-base
  • download/download/.svn/text-base/MiniTPFw.exe.svn-base
    .exe windows:5 windows x86 arch:x86

    dd995849a26373017906ac9d8c643f62


    Code Sign

    Headers

    Imports

    Sections

  • download/download/.svn/text-base/id.dat.svn-base
  • download/download/.svn/text-base/msvcp71.dll.svn-base
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • download/download/.svn/text-base/msvcr71.dll.svn-base
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • download/download/.svn/text-base/zlib1.dll.svn-base
    .dll windows:4 windows x86 arch:x86

    d00508bfde28cfe9a438e31820271a30


    Headers

    Imports

    Exports

    Sections

  • download/download/MiniTPFw.exe
    .exe windows:5 windows x86 arch:x86

    dd995849a26373017906ac9d8c643f62


    Code Sign

    Headers

    Imports

    Sections

  • download/download/id.dat
  • download/download/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • download/download/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • download/download/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    d00508bfde28cfe9a438e31820271a30


    Headers

    Imports

    Exports

    Sections

  • download/xldl.dll
    .dll windows:4 windows x86 arch:x86

    45468f3a2269a2595f5115a57780c86a


    Code Sign

    Headers

    Imports

    Exports

    Sections