General

  • Target

    Frhed-1.7.1-Setup.exe

  • Size

    717KB

  • MD5

    5c16c5461b592b95c9134e9ca7bb5eed

  • SHA1

    9fc2f138a899e48f84d2ab6da423e38fbe9c59f3

  • SHA256

    1058379c7596e86a1b864d070b7cca52efc15f692c2c480b112bf18d2f3c2835

  • SHA512

    86e19aac0decd447b94e2905b42d8ab02dd6eef3568f5191ef339632f6c64ec1fe2716feaa801c361e84cd31d36be7fff05343d6e0b8e39c7604ae006c4437e7

  • SSDEEP

    12288:4LpoxfuRdRrNP71ThD9Bcl0GsV78OzDSey0gWrTF4zA3hixkla17gvg2V40LPV4r:4Lpo1o971N9AwkcF4Ah1l87gvg2e0LV6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • Frhed-1.7.1-Setup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Docs/ChangeLog.txt
  • Docs/Contributors.txt
  • Docs/Frhed.chm
    .chm
  • Docs/GPL.txt
  • Docs/History.txt
  • Docs/ReadMe.txt
  • Languages/de.po
  • Languages/fr.po
  • Languages/heksedit.lng
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Languages/nl.po
  • Microsoft.VC80.CRT.manifest
  • RAWIO32.dll
    .dll windows:4 windows x86 arch:x86

    dc9b014d11268a2bf306f8e05ca192fa


    Headers

    Imports

    Exports

    Sections

  • Sample.tpl
  • frhed.exe
    .exe windows:4 windows x86 arch:x86

    89267033d64e83377e8fcb676fdde4d4


    Headers

    Imports

    Sections

  • heksedit.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e786e6f0539907ada42393dc7335ab38


    Headers

    Imports

    Exports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections