Resubmissions

02/09/2024, 19:58

240902-yp65kaxcjh 6

02/09/2024, 19:50

240902-ykbg4awbrq 6

General

  • Target

    FoxmailSetup_7.2.25.306.exe

  • Size

    121.1MB

  • MD5

    3b35027c36cbb658249aebc2e78827b1

  • SHA1

    f8284c9d051120e369ee533b9d28b13b5b27a998

  • SHA256

    4f4498590e33731e790ec9e9c667cb49727047e28a158f72e4495dfcf9a4b770

  • SHA512

    0bdc840b57ee4286ced3cd427be3ab5ceaea4f278160d5c74e432585c0acc1d4590d0740accf71576da8fa13053e1e4300fc273e0ad6032c13478c17435ae2a1

  • SSDEEP

    3145728:l/cbcWW53JZJ4TXX5sf7S6lYyu6Fg4mEwxG1h4T+oZ5dxny:lPZwuS9TTG1hfou

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • FoxmailSetup_7.2.25.306.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FoxPlugin.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $PLUGINSDIR/FoxmailFinish_CH.ini
  • $PLUGINSDIR/FoxmailFinish_EN.ini
  • $PLUGINSDIR/FoxmailFinish_TC.ini
  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:6 windows x86 arch:x86

    e9fbea7ccf193cc06cc4749a7c0b4596


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/QQDownHelper.dll
    .dll windows:4 windows x86 arch:x86

    4cee3464b08c1e785678cbc153d535f5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WPS_CH.ini
  • $PLUGINSDIR/WPS_EN.ini
  • $PLUGINSDIR/WPS_TC.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • 7.2.25.306/Help/OnlineHelp.url
  • 7.2.25.306/Info/MXServerConf.txt
  • 7.2.25.306/Info/Readme.txt
  • 7.2.25.306/Info/ServerConf.txt
  • 7.2.25.306/Languages/Chinese.lgb
  • 7.2.25.306/Languages/Chinese_big5.lgb
  • 7.2.25.306/Languages/English.lgb
  • 7.2.25.306/Plugins/IM/rtx.dll
    .dll windows:1 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • 7.2.25.306/RSS/RssRecommendation.xsl
    .xml
  • 7.2.25.306/RSS/Styles/Images/0087.gif
    .gif
  • 7.2.25.306/RSS/Styles/Images/0089.gif
    .gif
  • 7.2.25.306/RSS/Styles/Images/comments.gif
    .gif
  • 7.2.25.306/RSS/Styles/Images/comments2.gif
    .gif
  • 7.2.25.306/RSS/Styles/cell.xsl
  • 7.2.25.306/RSS/Styles/clear.xsl
    .xml
  • 7.2.25.306/RSS/Styles/silent.xsl
  • 7.2.25.306/RSS/Styles/watermark.xsl
    .xml
  • 7.2.25.306/RSS/class.txt
  • 7.2.25.306/RSS/images/rss.png
    .png
  • 7.2.25.306/RSS/images/rssdefault.png
    .png
  • 7.2.25.306/RSS/style.css
  • 7.2.25.306/Template/Rss/RSS_Body.html
  • 7.2.25.306/icos/126.com.ico
  • 7.2.25.306/icos/163.com.ico
  • 7.2.25.306/icos/foxmail.com.ico
  • 7.2.25.306/icos/foxmail.ico
  • 7.2.25.306/icos/gmail.com.ico
  • 7.2.25.306/icos/hotmail.com.ico
  • 7.2.25.306/icos/live.cn.ico
  • 7.2.25.306/icos/live.com.ico
  • 7.2.25.306/icos/qq.com.ico
  • Global/Address/Images/contact.png
    .png
  • Global/CEF/Dictionaries/en-US-8-0.bdic
  • Global/Stationery/033/bg.jpg
    .jpg
  • Global/Stationery/033/index.htm
    .html
  • Global/Stationery/033/thumb.bmp
  • Global/Stationery/034/bg.jpg
    .jpg
  • Global/Stationery/034/index.htm
    .html
  • Global/Stationery/034/thumb.bmp
  • Global/Stationery/035/bg.jpg
    .jpg
  • Global/Stationery/035/index.htm
    .html
  • Global/Stationery/035/thumb.bmp
  • Global/Stationery/036/bg.jpg
    .jpg
  • Global/Stationery/036/index.htm
    .html
  • Global/Stationery/036/thumb.bmp
  • Global/Stationery/037/bg.jpg
    .jpg
  • Global/Stationery/037/index.htm
    .html
  • Global/Stationery/037/thumb.bmp
  • Global/Stationery/038/bg.jpg
    .jpg
  • Global/Stationery/038/index.htm
    .html
  • Global/Stationery/038/thumb.bmp
  • Global/Stationery/039/bg.jpg
    .jpg
  • Global/Stationery/039/index.htm
    .html
  • Global/Stationery/039/thumb.bmp
  • Global/Stationery/040/bg.jpg
    .jpg
  • Global/Stationery/040/index.htm
    .html
  • Global/Stationery/040/thumb.bmp
  • Global/Stationery/1.gif
    .gif
  • Global/Stationery/2.jpg
    .jpg
  • Global/Stationery/3.gif
    .gif
  • Global/Stationery/4.gif
    .gif
  • Global/Stationery/5.jpg
    .jpg
  • Global/Stationery/6.gif
    .gif
  • Global/Stationery/7.gif
    .gif
  • Global/Stationery/8.gif
    .gif
  • Global/Stationery/stationery.xml
  • Global/Stationery/suo.bmp
  • Global/favIcons/mail.126.com.ico
  • Global/favIcons/mail.163.com.ico
  • Global/favIcons/mail.foxmail.com.ico
  • Global/favIcons/mail.google.com.ico
  • Global/favIcons/mail.live.com.ico
  • Global/favIcons/mail.outlook.com.ico
  • Global/favIcons/mail.qq.com.ico
  • Global/favIcons/mail.sina.com.ico
  • Global/favIcons/qqbizdomain.ico