General

  • Target

    f2ae1c31a390a709afd5714f180ab7f6384d466253c45b35296052ac000d01e5

  • Size

    602KB

  • MD5

    c649066c2d8c395f2ba12705403701c8

  • SHA1

    b75777952a83bd6f53f05ae104f6975beada70a2

  • SHA256

    f2ae1c31a390a709afd5714f180ab7f6384d466253c45b35296052ac000d01e5

  • SHA512

    490ca61ce80f12a924aafabdbe9d02fcad7cd414dec0567660d52ff9c8b72e4832a902e20c3a96f0ebe5a6d2a5694cce14cd8dea761da680f4f49c0cced1d3e8

  • SSDEEP

    12288:yTNP++++++M++++5lm9euKBcqOzhuW/sTIdCPi0fWL5:yTolahKqqpc9/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2ae1c31a390a709afd5714f180ab7f6384d466253c45b35296052ac000d01e5
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CertCheck.dll
    .dll windows:6 windows x86 arch:x86

    163f62e62e5c910df6e4698845c3976c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CityHash.dll
    .dll windows:4 windows x86 arch:x86

    720db9870d7edf191c6f2f6cfa752e0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InetBgDL.dll
    .dll windows:10 windows x86 arch:x86

    d31081e032b95397f853b7ff1f4f1f94


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WebBrowser.dll
    .dll windows:6 windows x86 arch:x86

    593e2964c28ea83c5cef884a4b9f310b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bgstub.jpg
    .jpg
  • $PLUGINSDIR/installing.html
    .html
  • $PLUGINSDIR/installing.js
    .js
  • $PLUGINSDIR/installing_page.css
  • $PLUGINSDIR/nsJSON.dll
    .dll windows:6 windows x86 arch:x86

    674631b5b86309caa1d0df66c91a50f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/profile_cleanup.html
    .html
  • $PLUGINSDIR/profile_cleanup.js
    .js
  • $PLUGINSDIR/profile_cleanup_page.css
  • $PLUGINSDIR/stub_common.css
  • $PLUGINSDIR/stub_common.js
    .js