General

  • Target

    SecuriteInfo.com.BScope.Trojan.Click.9810.26559.exe

  • Size

    2.2MB

  • MD5

    738c1b8d6a22d7cbba23d824f54b492a

  • SHA1

    616021cc12e54d7cd9aee965dc685f49ea1a32f2

  • SHA256

    32a40983b6c68d9da41a1c40c24295a6dae68d06e07adf9358c4021b7f4543d7

  • SHA512

    719a0a449526d108bb52fe76420593998d924371cefed924b4a8cfc3074b06c889c73633a6c2a276d1fc07d112817c81836fdef90611bc594e78cf347e60c00d

  • SSDEEP

    49152:/Jez33R4PWkth21zcO7/deeckB8GN2IJOqgMuJMAbGDIYBJ:KR1kt0/1eeceBJOGmMAbGDI8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • SecuriteInfo.com.BScope.Trojan.Click.9810.26559.exe
    .exe windows:4 windows x86 arch:x86

    ea4e67a31ace1a72683a99b80cf37830


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    d576645bcd8a66d2fe678a075f4cc6e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/SWUKey_SKF.dll
    .dll windows:5 windows x86 arch:x86

    8a857c9821077511d01a2da4a9a79b9c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    977736e2cac137c628527d8ac207e0c0


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c85d8396f1ce855bc219450c4b2c265b


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • $_2_/windows/SysWOW64/SWUKey_SKF.dll
    .dll windows:5 windows x86 arch:x86

    8a857c9821077511d01a2da4a9a79b9c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/windows/SysWOW64/mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    977736e2cac137c628527d8ac207e0c0


    Headers

    Imports

    Exports

    Sections

  • $_2_/windows/SysWOW64/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c85d8396f1ce855bc219450c4b2c265b


    Headers

    Imports

    Exports

    Sections

  • $_2_/windows/SysWOW64/msvcrt.dll
    .dll windows:5 windows x86 arch:x86

    1838f96daab97a33395f5dee7b6f4a3c


    Headers

    Imports

    Exports

    Sections

  • Hyperlink.ico
  • SWUKey_Reg.exe
    .exe windows:4 windows x86 arch:x86

    742d5ab18a7d5c6f90be0113cbd1163e


    Headers

    Imports

    Sections

  • SWUKey_SafeHelper.dll
    .dll windows:5 windows x86 arch:x86

    c01ca834edae3ea5ba94c583d7092c5a


    Headers

    Imports

    Exports

    Sections

  • SWUKey_Srv.exe
    .exe windows:4 windows x86 arch:x86

    9a24862d8ea19ac260714bd09e907d55


    Headers

    Imports

    Sections

  • SWUKey_Tool.exe
    .exe windows:5 windows x86 arch:x86

    3543f29acf8f60fbab0693a9b13a19e7


    Headers

    Imports

    Sections

  • SWUKey_UI.dll
    .dll windows:4 windows x86 arch:x86

    968bd4cf9aee9a2c33e2884f4392210a


    Headers

    Imports

    Exports

    Sections

  • Uninstall.ico
  • Utility.dll
    .dll windows:5 windows x86 arch:x86

    f7b9fbc9c34eb21dbfcb38a8b17c06b4


    Headers

    Imports

    Exports

    Sections

  • VerifyPIN.ini
  • Version.ini