General

  • Target

    19b8f95d9f53bdb62eb6a0c5c936922c.bin

  • Size

    6.4MB

  • MD5

    19b8f95d9f53bdb62eb6a0c5c936922c

  • SHA1

    a8a65ef399f0dab3db8a20da7f26a2e3f20bb42f

  • SHA256

    169605839aebe681cc8f32304083932a0a710dad4d24c900a9dc17d92f6efd29

  • SHA512

    968b2f984b75f9947768cd587409311cae0d0e4dae2e1575bd9e8df585fab6848dc1820d8de8b9aa39c98244de0acb82f90097e4ac4e4d4abb410ca5d4144561

  • SSDEEP

    196608:rp7Z18iBSzA9tuKFddmGJfq9c1yvoOdR7:d7Z180SzKFd5FpPOv7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 8 IoCs

Files

  • 19b8f95d9f53bdb62eb6a0c5c936922c.bin
    .rar
  • FiddlerSetup.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FiddlerSetup.exe
    .exe windows:4 windows x86 arch:x86

    4f67aeda01a0484282e8c59006b0b352


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • Analytics.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Analytics.pdb
  • App.ico
  • Be.Windows.Forms.HexBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Countdown.wav
  • EnableLoopback.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • EnableLoopback.pdb
  • ExecAction.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • FSE2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Fiddler.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Fiddler.exe.config
  • Fiddler.pdb
  • ForceCPU.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • GA.Analytics.Monitor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GA.Analytics.Monitor.pdb
  • ImportExport/BasicFormats.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ImportExport/BasicFormats.pdb
  • ImportExport/VSWebTestExport.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ImportExport/VSWebTestExport.pdb
  • Inspectors/QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/QWhale.Syntax.Schemes.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Inspectors/Standard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Inspectors/SyntaxView.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • LoadScript.wav
  • LoadScriptError.wav
  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ResponseTemplates/200_FiddlerGif.dat
  • ResponseTemplates/200_SimpleHTML.dat
  • ResponseTemplates/200_TransPixel.dat
  • ResponseTemplates/204_NoContent.dat
  • ResponseTemplates/302_Redirect.dat
  • ResponseTemplates/303_RedirectWithGet.dat
  • ResponseTemplates/304_NotModified.dat
  • ResponseTemplates/307_RedirectWithMethod.dat
  • ResponseTemplates/401_AuthBasic.dat
  • ResponseTemplates/401_AuthDigest.dat
  • ResponseTemplates/403_AuthDeny.dat
  • ResponseTemplates/404_Plain.dat
  • ResponseTemplates/407_ProxyAuthBasic.dat
  • ResponseTemplates/502_Unreachable.dat
  • RunNsisUninstallers.bat
  • Screenshot.wav
  • ScriptEditor/Analytics.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ScriptEditor/Analytics.pdb
  • ScriptEditor/FSE2.exe.config
  • ScriptEditor/GA.Analytics.Monitor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ScriptEditor/GA.Analytics.Monitor.pdb
  • ScriptEditor/QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ScriptEditor/QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ScriptEditor/QWhale.Syntax.Parsers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ScriptEditor/QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Addon.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Addon.pdb
  • Scripts/FiddlerOrchestra.Connection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Protocol.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/FiddlerOrchestra.Utilities.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/QWhale.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/QWhale.Editor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/QWhale.Syntax.Parsers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/QWhale.Syntax.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Scripts/RulesTab2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/SampleRules.cs
  • Scripts/SampleRules.js
    .js
  • Scripts/SimpleFilter.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/SimpleFilter.pdb
  • Scripts/Timeline.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Scripts/Timeline.pdb
  • Scripts/netstandard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • SetupHelper
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Telerik.NetworkConnections.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Tools/Brotli.exe
    .exe windows:4 windows x86 arch:x86

    abde5b16095d3ba52da82b2720c99f51


    Headers

    Imports

    Sections

  • Tools/JXR2PNG.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Tools/JXR2PNG.exe.config
    .xml
  • Tools/PngDistill.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Tools/PngDistill.pdb
  • Tools/Zopfli.exe
    .exe windows:5 windows x86 arch:x86

    0ee9b066fb0acca861b061bc6205cb49


    Code Sign

    Headers

    Imports

    Sections

  • Tools/dwebp.exe
    .exe windows:5 windows x86 arch:x86

    2d085d0bc738a6c295d68bd5aed725a8


    Headers

    Imports

    Sections

  • TrustCert.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • TrustCert.pdb
  • Xceed.Compression.Formats.v5.4.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Xceed.Compression.v5.4.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Xceed.FileSystem.v5.4.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Xceed.Zip.v5.4.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • credits.txt
  • license.txt
  • makecert.exe
    .exe windows:6 windows x86 arch:x86

    8edc201d42ea718d1e65bb5d3125c066


    Code Sign

    Headers

    Imports

    Sections

  • saz.ico
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • How to install.txt
  • Rules/Bloodweb
  • Rules/GetAll
  • Rules/Market
  • Rules/import_FullProfile_v2.farx
  • Rules/import_me_v4.farx
  • fiddlercertmaker.exe
    .exe windows:4 windows x86 arch:x86

    4f67aeda01a0484282e8c59006b0b352


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • BCLicense.txt
  • BCMakeCert.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CertMaker.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections