General

  • Target

    f6dea9e303e32a64e1d30893cf904f1017c1742e436e41f118fd8c09cd6730d2

  • Size

    1.2MB

  • MD5

    37bfbdc59bf8d8228410866b1e8b7221

  • SHA1

    33e543f255ed6bf70e9739f751baf1c1e4c34a00

  • SHA256

    f6dea9e303e32a64e1d30893cf904f1017c1742e436e41f118fd8c09cd6730d2

  • SHA512

    c23161ac77982e58dcc0f95947f06b12934d41183e3130e93d81fd101495bc157d14988ad0a4ccdb45a46866b3cebfa1117a6e01662d8fde15c54f11b4f1f28e

  • SSDEEP

    24576:4jakjfsKRSQ35Lv0qfYlQXHmZAGNYAZrBW:4ujQpQRleHqXZrBW

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f6dea9e303e32a64e1d30893cf904f1017c1742e436e41f118fd8c09cd6730d2
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BI.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DownloadACC.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FirefoxHandler.dll
    .dll windows:5 windows x86 arch:x86

    0b0bd9a74b81c20dd1ca10dffb1e2ff5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/OCSetupHlp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    bcc9fc26368b3f6e1a5258f41bed8ac8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProxyInstaller.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WebApp/Css/Buttons.css
  • $PLUGINSDIR/WebApp/Css/Buttons.ltr.css
  • $PLUGINSDIR/WebApp/Css/Buttons.rtl.css
  • $PLUGINSDIR/WebApp/Css/Copy of Buttons.css
  • $PLUGINSDIR/WebApp/Css/PIE.htc
    .js
  • $PLUGINSDIR/WebApp/Css/Reset.css
  • $PLUGINSDIR/WebApp/Css/css.css
  • $PLUGINSDIR/WebApp/Css/css.ltr.css
  • $PLUGINSDIR/WebApp/Css/css.rtl.css
  • $PLUGINSDIR/WebApp/Failed.htm
    .js
  • $PLUGINSDIR/WebApp/Images/-.png
    .png
  • $PLUGINSDIR/WebApp/Images/01Net-Logo.jpg
    .jpg
  • $PLUGINSDIR/WebApp/Images/1JPJ.jpg
    .jpg
  • $PLUGINSDIR/WebApp/Images/BG.png
    .png
  • $PLUGINSDIR/WebApp/Images/BoxBg.png
    .png
  • $PLUGINSDIR/WebApp/Images/BrotherSoft.png
    .png
  • $PLUGINSDIR/WebApp/Images/CancelBG.png
    .png
  • $PLUGINSDIR/WebApp/Images/InstallationFailed.png
    .png
  • $PLUGINSDIR/WebApp/Images/InstallationSuccessful.png
    .png
  • $PLUGINSDIR/WebApp/Images/InternetTurbo.png
    .png
  • $PLUGINSDIR/WebApp/Images/Nana10.png
    .png
  • $PLUGINSDIR/WebApp/Images/X.png
    .png
  • $PLUGINSDIR/WebApp/Images/button.png
    .png
  • $PLUGINSDIR/WebApp/Images/check-V.png
    .png
  • $PLUGINSDIR/WebApp/Images/conduit-logo.png
    .png
  • $PLUGINSDIR/WebApp/Images/loaderb64-transparent.gif
    .gif
  • $PLUGINSDIR/WebApp/Images/myiweb-logo.jpg
    .jpg
  • $PLUGINSDIR/WebApp/Images/myiweb-logo.png
    .png
  • $PLUGINSDIR/WebApp/Js/API.js
    .js
  • $PLUGINSDIR/WebApp/Js/ExternalParams.js
    .js
  • $PLUGINSDIR/WebApp/Js/PIE.htc
    .js
  • $PLUGINSDIR/WebApp/Js/ProgressBar.js
    .js
  • $PLUGINSDIR/WebApp/Js/Store.js
    .js
  • $PLUGINSDIR/WebApp/Js/jquery-ui-1.8.16.custom.min.js
    .js
  • $PLUGINSDIR/WebApp/Js/json2.js
    .js
  • $PLUGINSDIR/WebApp/Js/script.js
    .js
  • $PLUGINSDIR/WebApp/Js/xml2json.js
    .js
  • $PLUGINSDIR/WebApp/Loading.htm
    .js
  • $PLUGINSDIR/WebApp/NoneSilentSuccess.htm
    .js
  • $PLUGINSDIR/WebApp/PIE.htc
    .js
  • $PLUGINSDIR/WebApp/ProgressBar.htm
    .js
  • $PLUGINSDIR/WebApp/Reset.css
  • $PLUGINSDIR/WebApp/SilentSuccess.htm
    .js
  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/icon.png
    .png
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/webapphost.dll
    .dll windows:5 windows x86 arch:x86

    9bfef1113f646b1402290072f01f04ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Code Sign

    Headers

    Imports

    Exports

    Sections