Overview

overview

10

Static

static

3

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab8ea565a7bc4b0143d8413721441932013d5cfeb7993436566a2ff96245b10e

  • Size

    460KB

  • MD5

    a53f04427aa98498b7716f1357612d6e

  • SHA1

    85333b64af04449a55035155106a41f93d0e5243

  • SHA256

    ab8ea565a7bc4b0143d8413721441932013d5cfeb7993436566a2ff96245b10e

  • SHA512

    2811942715d2f585f628ceeac3489e8579ab2ad67d72f4fcbc4ea3a24588236367e13a3c9f58860373869fd3b970f8f6d15d4c07f4e14af4e2846128ae22a80c

  • SSDEEP

    12288:q0gLvXr7lfdqc9F85gq0Zofk/i1VtZte2:lSv7Z1Fu5g/ZFaPU2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • ab8ea565a7bc4b0143d8413721441932013d5cfeb7993436566a2ff96245b10e
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $PLUGINSDIR/NAct.dll
    .dll windows:5 windows x86 arch:x86

    f0e46fcc791b9c06cb01f0d5f33906d9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $TEMP/使用會保護重要資料的瀏覽器/App.config
  • $TEMP/使用會保護重要資料的瀏覽器/Cookie.ico
  • $TEMP/使用會保護重要資料的瀏覽器/NoMoreCookiesInstaller.csproj
  • $TEMP/使用會保護重要資料的瀏覽器/Program.cs
    .js
  • $TEMP/使用會保護重要資料的瀏覽器/Settings.cs
  • $TEMP/使用會保護重要資料的瀏覽器/VersionChecker.cs
  • $TEMP/使用會保護重要資料的瀏覽器/app.manifest
  • $TEMP/使用會保護重要資料的瀏覽器/ico.ico
  • $TEMP/使用會保護重要資料的瀏覽器/mainstream.exe
    .exe windows:6 windows x64 arch:x64

    5fd351b76ee659c0e4acca86df1ee513


    Headers

    Imports

    Sections

  • $TEMP/使用會保護重要資料的瀏覽器/psh_host.dll
    .dll windows:6 windows x64 arch:x64

    f433e93ad4f68680ba36188ff5abaebc


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections