General

  • Target

    c5f92174262a19702e7a85a78dc9fc0185fd2bc653f728b0382b13219d230fc1

  • Size

    4.0MB

  • MD5

    4ac437c51517476a9e399b4327b21f8a

  • SHA1

    9694694626393d6f5d55601478090d046e508da9

  • SHA256

    c5f92174262a19702e7a85a78dc9fc0185fd2bc653f728b0382b13219d230fc1

  • SHA512

    80fe22c8ace682e1ebbe1b4d5cea81eb1e7a9042f77158e2f6e101818b71cdef8b4f3c90178337979194e23033775ad8497772b06f3bc204fbbd4934a655ca84

  • SSDEEP

    98304:C+s1XQcqVnp+E/6yuTFOAJfu1i5P0oSNNXv:Cn3qVnpZSyuTFOAY6P0oy5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • c5f92174262a19702e7a85a78dc9fc0185fd2bc653f728b0382b13219d230fc1
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • AutoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    36f887433eff567579db07090947d243


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
    .xml
  • Microsoft.VC90.CRT/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NGBOSS.exe
    .exe windows:5 windows x86 arch:x86

    0aba6b2b28bba123d096610cb4724440


    Code Sign

    Headers

    Imports

    Sections

  • ScreenCapture.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    02f1e8155c504b65774f1e8514be368d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WadeInvoker.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    ce3aeb1d7f0e1ea82ecd85e6d5b6dc7c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WadeInvoker64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    3c93cfdc0a7e7a6a4d25790c599725c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cer/WadeCer.cer
  • cer/certmgr.Exe
    .exe windows:5 windows x86 arch:x86

    f1b744c32fd04cce8c1afb20fc22b136


    Headers

    Imports

    Sections

  • uninst.exe.nsis