General

  • Target

    105f0be4f35817fd0a34b255ac5c44b8b6a44425e1d0d8376789780b4f69e846

  • Size

    7.2MB

  • MD5

    07cc0ff4d171d9eb3a52e77fcfe41068

  • SHA1

    682958e9ba60b66ec72d483b301d8d338d42aa63

  • SHA256

    105f0be4f35817fd0a34b255ac5c44b8b6a44425e1d0d8376789780b4f69e846

  • SHA512

    45a24adad3d538afd930a725b0baf83e4216838249c3d3c47580f8a984825f3e87a0bcab3d6a0c65de7480a2366bdb21c867a4c2e94be12ee6df5c0a464e55c7

  • SSDEEP

    196608:7HGD+exuuWIjS/yVZy1dH096JSfBH3D/bv:7HQ+guuqa61dQYSpjv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • 105f0be4f35817fd0a34b255ac5c44b8b6a44425e1d0d8376789780b4f69e846
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/CKeyDriver.dll
    .dll windows:4 windows x86 arch:x86

    c629e7966aa4db9d18096cbeb4e03352


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/XSCipherService.dll
    .dll windows:4 windows x86 arch:x86

    cbc9068e922e838f715721b59bd3baa2


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/XSSealCom.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    1eff40f2d635b0ddb073b6c7a94999e8


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/XSSealProvideSDK.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    8c0046bc8ff3c670303bddb361adf9e5


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ZKeyDriver.dll
    .dll windows:4 windows x86 arch:x86

    c629e7966aa4db9d18096cbeb4e03352


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/mfc100.dll
    .dll windows:5 windows x86 arch:x86

    c45c50a45dcc5e647441103ee242c873


    Code Sign

    Headers

    Imports

    Sections

  • $SYSDIR/mfc100u.dll
    .dll windows:5 windows x86 arch:x86

    bd8b4b626cddac3b44f6c27ca0683f8e


    Code Sign

    Headers

    Imports

    Sections

  • $SYSDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ole32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    7016bf747e0b00620f3fac9155da41f7


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/oleaut32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    977da93a00c8c967c5054bcabd8a4ebc


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/olepro32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    23d773f76a6d51cbb1903ab7cdbba950


    Headers

    Imports

    Exports

    Sections

  • XSSealProviderApp.exe
    .exe windows:5 windows x86 arch:x86

    894d77fb8c5e3c15d7b70cc13d1ba8d0


    Headers

    Imports

    Sections

  • XSService.exe
    .exe windows:5 windows x86 arch:x86

    6fa26a835ca12932d08ec493ba3de626


    Headers

    Imports

    Exports

    Sections

  • XSServiceHelpNoDetection.exe
    .exe windows:5 windows x86 arch:x86

    5c87d33547157e09c13ab091cd365036


    Headers

    Imports

    Sections

  • nginxlsV1.0.0.1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • nginx-1.20.2/conf/fastcgi.conf
  • nginx-1.20.2/conf/fastcgi_params
  • nginx-1.20.2/conf/koi-utf
  • nginx-1.20.2/conf/koi-win
  • nginx-1.20.2/conf/mime.types
  • nginx-1.20.2/conf/nginx.conf
  • nginx-1.20.2/conf/nginx.conf.bak
  • nginx-1.20.2/conf/scgi_params
  • nginx-1.20.2/conf/server.crt
  • nginx-1.20.2/conf/server.key
  • nginx-1.20.2/conf/sslcer.zip
    .zip
  • server.crt
  • server.key
  • nginx-1.20.2/conf/uwsgi_params
  • nginx-1.20.2/conf/win-utf
  • nginx-1.20.2/contrib/README
  • nginx-1.20.2/contrib/geo2nginx.pl
    .pl .sh linux
  • nginx-1.20.2/contrib/unicode2nginx/koi-utf
  • nginx-1.20.2/contrib/unicode2nginx/unicode-to-nginx.pl
    .pl .sh linux
  • nginx-1.20.2/contrib/unicode2nginx/win-utf
  • nginx-1.20.2/contrib/vim/ftdetect/nginx.vim
  • nginx-1.20.2/contrib/vim/ftplugin/nginx.vim
  • nginx-1.20.2/contrib/vim/indent/nginx.vim
  • nginx-1.20.2/contrib/vim/syntax/nginx.vim
  • nginx-1.20.2/docs/CHANGES
  • nginx-1.20.2/docs/CHANGES.ru
  • nginx-1.20.2/docs/LICENSE
  • nginx-1.20.2/docs/OpenSSL.LICENSE
  • nginx-1.20.2/docs/PCRE.LICENCE
  • nginx-1.20.2/docs/README
  • nginx-1.20.2/docs/zlib.LICENSE
  • nginx-1.20.2/html/50x.html
    .html
  • nginx-1.20.2/html/index.html
    .html
  • nginx-1.20.2/logs/access.log
  • nginx-1.20.2/logs/error.log
  • nginx-1.20.2/logs/nginx.pid
  • nginx-1.20.2/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nginx-1.20.2/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • nginx-1.20.2/nginxls.exe
    .exe windows:5 windows x86 arch:x86

    f619317c7bc9ba8cad4c29f372a76eb9


    Headers

    Imports

    Sections

  • nginx-1.20.2/reload.bat
  • nginx-1.20.2/runnginx.exe
    .exe windows:5 windows x86 arch:x86

    fdfeedf6804c3b04fae0fd4da6652961


    Headers

    Imports

    Sections

  • nginx-1.20.2/start.bat
  • nginx-1.20.2/stop.bat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections