General

  • Target

    XP Antivirus 2008.zip

  • Size

    1.3MB

  • MD5

    a06ce8cd000f726c1aa2485a841f9640

  • SHA1

    c2fad57e9c22ea6714d8bee9941339aca1cc7e8d

  • SHA256

    20c562166df0c0a76fe9ff901b20983321b2e9a4b045e3c3c3a20f8e4f22a5a3

  • SHA512

    32947e6424359499ec393db8e9776b4fcfb4419e5b8e821515d1220078458d3bbbe879b22a6a18b6d3f457369ba9369b0970f8905b431dd5e9732c805b0d7be2

  • SSDEEP

    24576:LzUiDG2P0hswdVfCbit9J0K98gZhEpBv9HOIxd5sshEb5ZhAm4YhuiRJwrYN/jT/:39G2P0KwdpCbit9JOXvkAd5vKwti/jkm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • XP Antivirus 2008.zip
    .zip

    Password: mysubsarethebest

  • [email protected]
    .exe windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillSelf.dll
    .dll windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    bb981d54de1208258954ef6a95d1ec2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MachineKey.dll
    .dll windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    373a46f2dac5b6d7b5b3f2780d9e54f0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Mutex.dll
    .dll windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    a833fbcbd17326d1fe91bba98b26bfd8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/lastpage.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/update.ini
  • $TEMP/pin.vbs
    .vbs
  • $_7_.exe
    .exe windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    0dd28c30dea0b829fe2addad09403d7e


    Headers

    Imports

    Sections

  • MFC71.dll
    .dll windows:4 windows x86 arch:x86

    Password: mysubsarethebest

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • MFC71ENU.DLL
    .dll windows:4 windows x86 arch:x86

    Password: mysubsarethebest


    Headers

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • database.dat
    .zip
  • license.txt
  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • XPAntivirus2008.ico