General

  • Target
    1dd5bf67d2f7e0fc2e95baf84a8bda494668ff304fc6bb910b1c0d58d5a85bee
  • Size 6.1MB
  • Sample240610-czzmksbd97
  • SHA256 1dd5bf67d2f7e0fc2e95baf84a8bda494668ff304fc6bb910b1c0d58d5a85bee
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • 1dd5bf67d2f7e0fc2e95baf84a8bda494668ff304fc6bb910b1c0d58d5a85bee
    .exe 6.1MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-header.bmp
    24KB
  • $PLUGINSDIR/modern-wizard.bmp
    139KB
  • $SYSDIR/msvcp60.dll
    .dll 404KB
  • AyuConfig.exe
    .exe 28KB
  • ComDlls/TDAtOnce.dll
    .dll 173KB
  • ComDlls/ThunderAgent.dll
    .dll 104KB
  • ComDlls/XunLeiBHO.dll
    .dll 193KB
  • ComDlls/skin/DOWNLOAD_NORMAL.bmp
    2KB
  • ComDlls/skin/DOWNLOAD_PRESS.BMP
    2KB
  • ComDlls/skin/FB_BG.bmp
    3KB
  • ComDlls/skin/MENU_NORMAL.bmp
    560B
  • ComDlls/skin/MENU_PRESS.bmp
    560B
  • Components/Community/RichObject.dll
    .dll 244KB
  • Components/Community/XLCommunity.dll
    .dll 1.4MB
  • Components/Community/emoticons/1.png
    .png 3KB
  • Components/Community/emoticons/10.png
    .png 3KB
  • Components/Community/emoticons/11.png
    .png 3KB
  • Components/Community/emoticons/12.png
    .png 3KB
  • Components/Community/emoticons/13.png
    .png 3KB
  • Components/Community/emoticons/14.png
    .png 3KB
  • Components/Community/emoticons/15.png
    .png 3KB
  • Components/Community/emoticons/16.png
    .png 3KB
  • Components/Community/emoticons/17.png
    .png 3KB
  • Components/Community/emoticons/18.png
    .png 3KB
  • Components/Community/emoticons/19.png
    .png 3KB
  • Components/Community/emoticons/2.png
    .png 3KB
  • Components/Community/emoticons/20.png
    .png 3KB
  • Components/Community/emoticons/21.png
    .png 3KB
  • Components/Community/emoticons/3.png
    .png 3KB
  • Components/Community/emoticons/4.png
    .png 3KB
  • Components/Community/emoticons/5.png
    .png 3KB
  • Components/Community/emoticons/6.png
    .png 3KB
  • Components/Community/emoticons/7.png
    .png 3KB
  • Components/Community/emoticons/8.png
    .png 3KB
  • Components/Community/emoticons/9.png
    .png 3KB
  • Components/Community/faces/-1.gif
    .gif 560B
  • Components/Community/faces/-2.gif
    .gif 1KB
  • Components/Community/faces/0.gif
    .gif 586B
  • Components/Community/faces/1.gif
    .gif 1KB
  • Components/Community/toolbar.bmp
    11KB
  • Profiles/UserConfig.ini
    470B
  • Thunder.exe
    .exe 44KB

1dd5bf67d2f7e0fc2e95baf84a8bda494668ff304fc6bb910b1c0d58d5a85bee

  • IMPHASH 099c0646ea7282d232219f8807883be0
  • SHA256 1dd5bf67d2f7e0fc2e95baf84a8bda494668ff304fc6bb910b1c0d58d5a85bee
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

  • NSIS installer

Minor OS version
0
Major OS version
4
Entry point
12837
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths