General

  • Target

    d5341f6808f3bb6f3eef603425c85855578b4c69f87169fda536565eb6e994d7.exe

  • Size

    40.0MB

  • MD5

    4a8da625b5fa22dc66fc243a07304422

  • SHA1

    d6e1d6152ff60cee2e86059cb77c9fed5c29c5d8

  • SHA256

    d5341f6808f3bb6f3eef603425c85855578b4c69f87169fda536565eb6e994d7

  • SHA512

    9df6a14170b8137d238556ef32838d08a683478bc63d9100bef1fc1cb038dcee11dbcb9f1c8752681a939180a2fd45c518d6bcd99059014191cc53d9f57d31d2

  • SSDEEP

    786432:pCBQ6+bJ46ddNLkzoYO9FcYXRasIp+gf/8WNie/lL60DtKMQVrae2i:pCWfb6yIzoPFcYhVoHl24KMQYFi

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • d5341f6808f3bb6f3eef603425c85855578b4c69f87169fda536565eb6e994d7.exe
    .exe windows:4 windows x86 arch:x86

    c05041e01f84e1ccca9c4451f3b6a383


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/NJStar/NJStar Japanese WP6/Template/Vertical-Layout.NJX
  • $PLUGINSDIR/Registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • BackupDataFiles.ini
  • FILE_ID.DIZ
  • HTML/body_bg.jpg
    .jpg
  • HTML/reminder.htm
    .html
  • HanzInfo.ucd
  • JMDictX
  • JMDictX.DUT
  • JMDictX.E2J
  • JMDictX.FRE
  • JMDictX.GER
  • JMDictX.J2E
  • JMDictX.K2E
  • JMDictX.LNX
  • JMDictX.RUS
  • JMDictX.SPA
  • JMDictX.SWE
  • JMDictX.TAG
  • JMdict.VER
  • KANAKAN6.UJD
  • KanjiLvl.txt
  • LICENSE.txt
  • NGDIPlus.DLL.xxx
    .dll windows:5 windows x86 arch:x86

    6bc8326e1621dfdc02822becdc8bafba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NGDIPlus.dll
    .dll windows:5 windows x86 arch:x86

    6bc8326e1621dfdc02822becdc8bafba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NJB52UC.CNV.xxx
  • NJB52UC.cnv
  • NJB5H2UC.CNV.xxx
  • NJB5H2UC.cnv
  • NJCNS2UC.CNV
  • NJCNS2UC.CNV.xxx
  • NJDBCS.DLL.xxx
    .dll windows:5 windows x86 arch:x86

    ad1cbba034e5cc1284868b993b28042f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NJEDITXP.DLL.xxx
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • NJEDITXP.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • NJEDTFRA.DLL.xxx
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJEDTFRA.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJEDTJPN.DLL.xxx
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJEDTJPN.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJGB2UC.CNV.xxx
  • NJGB2UC.cnv
  • NJGBK2UC.CNV.xxx
  • NJGBK2UC.cnv
  • NJJINPUT.DLL.xxx
    .dll windows:5 windows x86 arch:x86

    8c727d80d5a207c38762a7ec36f6aa5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NJJRESFRA.DLL.xxx
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJJRESFRA.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJJRESJPN.DLL.xxx
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJJRESJPN.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJJS2UC.CNV.xxx
  • NJJS2UC.cnv
  • NJKSX2UC.CNV.xxx
  • NJKSX2UC.cnv
  • NJSPELL.dll
    .dll windows:5 windows x86 arch:x86

    27a95c3a0d3a0b9cb8258080647b12c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NJSPELL.dll.xxx
    .dll windows:5 windows x86 arch:x86

    27a95c3a0d3a0b9cb8258080647b12c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NJSTAR.NJS
  • NJSTARJ.EXE.xxx
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJSTARJ.chm
    .chm
  • NJStarJ.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • NJStarj.icns
  • NJStrokeJ.ncf.xxx
  • NJStrokeS.ncf.xxx
  • NJUC2B5.CNV.xxx
  • NJUC2B5.cnv
  • NJUC2B5H.CNV.xxx
  • NJUC2B5H.cnv
  • NJUC2GB.CNV.xxx
  • NJUC2GB.cnv
  • NJUC2GBK.CNV.xxx
  • NJUC2GBK.cnv
  • NJUC2JS.CNV.xxx
  • NJUC2JS.cnv
  • NJUC2KSX.CNV.xxx
  • NJUC2KSX.cnv
  • NJUCFREQ.ujd
  • NJZIP.dll
    .dll windows:5 windows x86 arch:x86

    ff86180ebffaee7333dd06d57ff4f116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NJZIP.dll.xxx
    .dll windows:5 windows x86 arch:x86

    ff86180ebffaee7333dd06d57ff4f116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Njdbcs.dll
    .dll windows:5 windows x86 arch:x86

    ad1cbba034e5cc1284868b993b28042f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NjinputH.ujd
  • NjinputI.ujd
  • NjinputN.ujd
  • NjinputO.ujd
  • NjinputP.ujd
  • NjinputQ.ujd
  • Njjinput.dll
    .dll windows:5 windows x86 arch:x86

    8c727d80d5a207c38762a7ec36f6aa5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OrderForm.NJS
  • Products.TXT
  • RADICALS.UCD
  • RADICALX.UCD
  • SPELL/Html.tlx
  • SPELL/Ssceam.tlx
    .vbs
  • SPELL/Sscebr.tlx
    .vbs
  • SPELL/accent.tlx
  • SPELL/correct.tlx
  • SPELL/ssceam2.clx
  • SPELL/sscebr2.clx
  • SPELL/ssceca.tlx
    .vbs
  • SPELL/ssceca2.clx
  • SPELL/ssceda.tlx
    .vbs
  • SPELL/ssceda2.clx
  • SPELL/sscedu.tlx
  • SPELL/sscedu2.clx
  • SPELL/sscefi.tlx
  • SPELL/sscefi2.clx
  • SPELL/sscefr.tlx
  • SPELL/sscefr2.clx
  • SPELL/sscege.tlx
  • SPELL/sscege2.clx
  • SPELL/sscegn.tlx
  • SPELL/sscegn2.clx
  • SPELL/ssceit.tlx
  • SPELL/ssceit2.clx
  • SPELL/sscela.tlx
  • SPELL/sscela2.clx
  • SPELL/sscelb.tlx
  • SPELL/sscelb2.clx
  • SPELL/sscema.tlx
  • SPELL/sscema2.clx
  • SPELL/sscemb.tlx
  • SPELL/sscemb2.clx
  • SPELL/sscenb.tlx
  • SPELL/sscenb2.clx
  • SPELL/sscepb.tlx
  • SPELL/sscepb2.clx
  • SPELL/sscepo.tlx
  • SPELL/sscepo2.clx
  • SPELL/sscesp.tlx
  • SPELL/sscesp2.clx
  • SPELL/sscesw.tlx
  • SPELL/sscesw2.clx
  • SPELL/tech.tlx
  • SPELL/userdic.tlx
  • SYMBOLS.UJD
  • Tutorial.NJS
  • UserImages.bmp
  • UserImages_x24.bmp
  • UserImages_x32.bmp
  • VENDOR.TXT
  • WHATSNEW.TXT
  • enamdict
  • enamdict.E2J
  • enamdict.J2E
  • enamdict.K2E
  • enamdict.LNX
  • enamdict.VER
  • libcurl.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • libcurl.txt
  • msvcr120.DLL.xxx
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • njcrybto.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • njstrokej.ncf
  • njstrokes.ncf
  • uMakJMDicIndex.exe
    .exe windows:6 windows x86 arch:x86

    c4787760dfda36e5c406b6334c596932


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe.nsis
  • update.dll
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • update.ini
    .xml