General

  • Target

    aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142

  • Size

    2.2MB

  • MD5

    cafd508f953e2d28acf9b49e80bf2fc6

  • SHA1

    0c739749978ef0b6077261e511ab10e9211f2c71

  • SHA256

    aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142

  • SHA512

    3ff026e849378691da40d406ce806c438c8a4f015217731bd132bfccdb58c4832306a3f92aa752af6d3ca71e2425f161155d767e56d23c15f0634424080caab3

  • SSDEEP

    49152:7VhVn6EBMgmH1Cz0DqfMus8/V3sYPyD9+gqulxheyY6:7XVn6OMgmH1CS7ec7fxY6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/deviceregister_shared.dll
    .dll windows:6 windows x86 arch:x86

    1e6a3d25a72a349b70871cd4c9daa00a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll windows:6 windows x86 arch:x86

    eafede63a5e136366a8badd5188b27ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res.zip
    .zip
  • app_warning_icon.png
    .png
  • banner_bk.jpg
    .jpg
  • btn_dark_1_disable.png
    .png
  • btn_dark_1_hover.png
    .png
  • btn_dark_1_normal.png
    .png
  • btn_dark_1_pushed.png
    .png
  • btn_dir_disable.png
    .png
  • btn_dir_hover.png
    .png
  • btn_dir_normal.png
    .png
  • btn_dir_pushed.png
    .png
  • btn_light_1_disable.png
    .png
  • btn_light_1_hover.png
    .png
  • btn_light_1_normal.png
    .png
  • btn_light_1_pushed.png
    .png
  • ckb_1_off.png
    .png
  • ckb_1_on.png
    .png
  • i18n.json
  • ic_close.png
    .png
  • ic_close_disabled.png
    .png
  • ic_close_hover.png
    .png
  • ic_close_pushed.png
    .png
  • ic_min.png
    .png
  • ic_min_disabled.png
    .png
  • ic_min_hover.png
    .png
  • ic_min_pushed.png
    .png
  • lang/cs-CZ.json
  • lang/de-DE.json
  • lang/el-GR.json
  • lang/en-US.json
  • lang/es-LA.json
  • lang/fi-FI.json
  • lang/fil-PH.json
  • lang/fr-FR.json
  • lang/hu-HU.json
  • lang/id-ID.json
  • lang/it-IT.json
  • lang/ja-JP.json
  • lang/ko-KR.json
  • lang/ms-MY.json
  • lang/nl-NL.json
  • lang/pl-PL.json
  • lang/pt-BR.json
  • lang/ro-RO.json
  • lang/ru-RU.json
  • lang/sv-SE.json
  • lang/th-TH.json
  • lang/tr-TR.json
  • lang/vi-VN.json
  • lang/zh-CN.json
  • lang/zh-TW.json
  • resource/install.xml
  • resource/message_box.xml
    .xml
  • resource/select_lang_msgbox.xml
    .xml
  • resource/uninstall.xml
    .xml
  • scroll_bar.png
    .png
  • scrollitem_hot.png
    .png
  • scrollitem_select.png
    .png
  • slider_back.png
    .png
  • slider_fore.png
    .png
  • slider_fore_old.png
    .png
  • textshow1.png
    .png
  • textshow2.png
    .png
  • textshow3.png
    .png
  • $PLUGINSDIR/shell_downloader.dll
    .dll windows:5 windows x86 arch:x86

    0b3fb2a38299087c380508c3970f355e


    Headers

    Imports

    Exports

    Sections