General

  • Target

    xspammer.zip

  • Size

    99.9MB

  • MD5

    76fa267b984131e0c2979c9edd827d2d

  • SHA1

    923abe1ec6b7c9561b8c358045c5cbcf8ec16aee

  • SHA256

    79f5285978388e5d5e37cac110e775d7aef4deb8dda79fff56f190d6ec1a422f

  • SHA512

    58eca285bef6a32f3d738d704db700dcd97be1ad03cfdc9893df7dd86c673f856c7f7f2c9ea00c0cd4738f64150bb342cb0f17a951487f3e057eed3d2418034a

  • SSDEEP

    3145728:VUL/nNFKWQC8LVzo/SfQwYtRlRTvezA22m6Spr:VOQR3QwYtRbTveM22m6Spr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • xspammer.zip
    .zip
  • XSpammer/LICENSE.electron.txt
  • XSpammer/LICENSES.chromium.html
  • XSpammer/Uninstall XSpammer.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • XSpammer/XSpammer.exe
    .exe windows:5 windows x64 arch:x64

    75804bffe12a995934f63205428ac121


    Headers

    Imports

    Exports

    Sections

  • XSpammer/chrome_100_percent.pak
  • XSpammer/chrome_200_percent.pak
  • XSpammer/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    36f6d7806085bd3a70ed8c5dcb51f6c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XSpammer/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    6ed82d3226365ffafff2c57c1935d352


    Headers

    Imports

    Exports

    Sections

  • XSpammer/icudtl.dat
  • XSpammer/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    585861b958c9f1fe9cc0324e1020a230


    Headers

    Imports

    Exports

    Sections

  • XSpammer/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    62b94bd6c48f8e0f6d82aa2752720dbe


    Headers

    Imports

    Exports

    Sections

  • XSpammer/locales/am.pak
  • XSpammer/locales/ar.pak
  • XSpammer/locales/bg.pak
  • XSpammer/locales/bn.pak
  • XSpammer/locales/ca.pak
  • XSpammer/locales/cs.pak
  • XSpammer/locales/da.pak
  • XSpammer/locales/de.pak
  • XSpammer/locales/el.pak
  • XSpammer/locales/en-GB.pak
  • XSpammer/locales/en-US.pak
  • XSpammer/locales/es-419.pak
  • XSpammer/locales/es.pak
  • XSpammer/locales/et.pak
  • XSpammer/locales/fa.pak
  • XSpammer/locales/fi.pak
  • XSpammer/locales/fil.pak
  • XSpammer/locales/fr.pak
  • XSpammer/locales/gu.pak
  • XSpammer/locales/he.pak
  • XSpammer/locales/hi.pak
  • XSpammer/locales/hr.pak
  • XSpammer/locales/hu.pak
  • XSpammer/locales/id.pak
  • XSpammer/locales/it.pak
  • XSpammer/locales/ja.pak
  • XSpammer/locales/kn.pak
  • XSpammer/locales/ko.pak
  • XSpammer/locales/lt.pak
  • XSpammer/locales/lv.pak
  • XSpammer/locales/ml.pak
  • XSpammer/locales/mr.pak
  • XSpammer/locales/ms.pak
  • XSpammer/locales/nb.pak
  • XSpammer/locales/nl.pak
  • XSpammer/locales/pl.pak
  • XSpammer/locales/pt-BR.pak
  • XSpammer/locales/pt-PT.pak
  • XSpammer/locales/ro.pak
  • XSpammer/locales/ru.pak
  • XSpammer/locales/sk.pak
  • XSpammer/locales/sl.pak
  • XSpammer/locales/sr.pak
  • XSpammer/locales/sv.pak
  • XSpammer/locales/sw.pak
  • XSpammer/locales/ta.pak
  • XSpammer/locales/te.pak
  • XSpammer/locales/th.pak
  • XSpammer/locales/tr.pak
  • XSpammer/locales/uk.pak
  • XSpammer/locales/vi.pak
  • XSpammer/locales/zh-CN.pak
  • XSpammer/locales/zh-TW.pak
  • XSpammer/resources.pak
  • XSpammer/resources/app.asar
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/LICENSE
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/package.json
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/src/bitmapimage.js
    .js
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/src/gif.js
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/src/gifcodec.js
    .js
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/src/gifframe.js
    .js
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/src/gifutil.js
    .js
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/src/index.js
  • XSpammer/resources/app.asar.unpacked/node_modules/gifwrap/templates/README.hbs
    .js
  • XSpammer/resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • XSpammer/snapshot_blob.bin
  • XSpammer/swiftshader/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    67db432914b7baa0738050364c019173


    Headers

    Imports

    Exports

    Sections

  • XSpammer/swiftshader/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    8b4ec8564c21d6087c06b61d3d5ffbbd


    Headers

    Imports

    Exports

    Sections

  • XSpammer/uninstallerIcon.ico
  • XSpammer/v8_context_snapshot.bin
  • XSpammer/vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    661e9d495f857b282ac48d29fc7f3fb6


    Headers

    Imports

    Exports

    Sections

  • XSpammer/vk_swiftshader_icd.json
  • XSpammer/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    21c5b88eff7d67aaad312ae7a9ae2733


    Headers

    Imports

    Exports

    Sections