General

  • Target

    clippingseditor-3.0.1_win32.zip

  • Size

    7.0MB

  • MD5

    386e99fbe5f4b7d6520c728bebf14b38

  • SHA1

    3b76182923d97abf41aaf26c892ee7c6130b75aa

  • SHA256

    43a70e68823c6a2a4ff41d9bbb05f27cab52ac1c138e225fe476ce86752f41b3

  • SHA512

    62b334438111d9fd4363c76e49c395d950c3fa21bed7e9b72b6c104dc4db721ba37a4feefb0a43e984d2e82a744fcd0503cddb2e4945a6728d70b42818a7db51

  • SSDEEP

    196608:HNXMuHtwX7A635l4EDHlIwyv4TsJMKtxHQMWYGLrhbq7h0q:HNXMoo4mF/sXwbhbql0q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

Files

  • clippingseditor-3.0.1_win32.zip
    .zip

    Password: infected

  • application.ini
  • chrome.manifest
  • chrome/clippings.jar
    .zip

    Password: infected

  • content/about.xul
    .js .xml polyglot
  • content/clippings.js
    .js
  • content/clippingseditor.xul
    .js .xml polyglot
  • content/export.js
    .js
  • content/export.xul
    .xml
  • content/miniHelp.xul
    .js .xml polyglot
  • content/rdftree.js
    .js
  • content/selectLocale.xul
    .js
  • content/strfmt.js
    .js
  • content/strtrm.js
    .js
  • content/utils.js
    .js
  • content/welcome.xul
    .js .xml polyglot
  • locale/en-US/clippings.dtd
  • locale/en-US/clippings.properties
  • locale/fr-FR/clippings.dtd
  • locale/fr-FR/clippings.properties
  • locale/it-IT/clippings.dtd
  • locale/it-IT/clippings.properties
  • locale/ja-JP/clippings.dtd
  • locale/ja-JP/clippings.properties
  • locale/nl-NL/clippings.dtd
  • locale/nl-NL/clippings.properties
  • locale/pl-PL/clippings.dtd
  • locale/pl-PL/clippings.properties
  • skin/clippings.css
  • skin/images/Toolbar.png
    .png

    Password: infected

  • skin/images/clippings-hilite.png
    .png

    Password: infected

  • skin/images/clippings-icon.png
    .png

    Password: infected

  • skin/images/clippings-root.png
    .png

    Password: infected

  • skin/images/clippings.png
    .png

    Password: infected

  • skin/images/clippingseditor.png
    .png

    Password: infected

  • skin/images/folder-open.png
    .png

    Password: infected

  • skin/images/folder.png
    .png
  • clippingseditor.exe
    .exe windows:4 windows x86 arch:x86

    d284bb7ae6f473acf96fea3cd5ad3ef9


    Headers

    Imports

    Exports

    Sections

  • components/nsClippingsService.js
    .js
  • components/nsDictionary.js
    .js
  • components/nsIClippingsService.idl
  • components/nsIClippingsService.xpt
  • components/nsIDictionary.idl
  • components/nsIDictionary.xpt
  • defaults/preferences/prefs.js
  • install.rdf
    .xml
  • xulrunner/AccessibleMarshal.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3c2f73655920528304f8f4709a91bf57


    Headers

    Imports

    Exports

    Sections

  • xulrunner/GenerateJavaInterfaces.exe
    .exe windows:4 windows x86 arch:x86

    d4ec2017bed90943f781e2d7bd2d9916


    Headers

    Imports

    Sections

  • xulrunner/LICENSE
  • xulrunner/README.txt
  • xulrunner/chrome/chromelist.txt
  • xulrunner/chrome/classic.jar
    .zip
  • xulrunner/chrome/classic.manifest
  • xulrunner/chrome/comm.jar
    .zip .js polyglot
  • xulrunner/chrome/comm.manifest
  • xulrunner/chrome/en-US.jar
    .zip
  • xulrunner/chrome/en-US.manifest
  • xulrunner/chrome/pippki.jar
    .zip .js polyglot
  • xulrunner/chrome/pippki.manifest
  • xulrunner/chrome/toolkit.jar
    .zip .js polyglot
  • xulrunner/chrome/toolkit.manifest
  • xulrunner/components/accessibility-msaa.xpt
  • xulrunner/components/accessibility.xpt
  • xulrunner/components/alerts.xpt
  • xulrunner/components/appshell.xpt
  • xulrunner/components/appstartup.xpt
  • xulrunner/components/auth.dll
    .dll windows:4 windows x86 arch:x86

    00ca9e885905197da177dc249314a2d5


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/autocomplete.xpt
  • xulrunner/components/autoconfig.dll
    .dll windows:4 windows x86 arch:x86

    a40d7fec7c35c23373564b3bdac91b98


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/autoconfig.xpt
  • xulrunner/components/caps.xpt
  • xulrunner/components/chardet.xpt
  • xulrunner/components/chrome.xpt
  • xulrunner/components/commandhandler.xpt
  • xulrunner/components/commandlines.xpt
  • xulrunner/components/composer.xpt
  • xulrunner/components/content_base.xpt
  • xulrunner/components/content_html.xpt
  • xulrunner/components/content_htmldoc.xpt
  • xulrunner/components/content_xmldoc.xpt
  • xulrunner/components/content_xslt.xpt
  • xulrunner/components/content_xtf.xpt
  • xulrunner/components/directory.xpt
  • xulrunner/components/docshell_base.xpt
  • xulrunner/components/dom.xpt
  • xulrunner/components/dom_base.xpt
  • xulrunner/components/dom_canvas.xpt
  • xulrunner/components/dom_core.xpt
  • xulrunner/components/dom_css.xpt
  • xulrunner/components/dom_events.xpt
  • xulrunner/components/dom_html.xpt
  • xulrunner/components/dom_loadsave.xpt
  • xulrunner/components/dom_range.xpt
  • xulrunner/components/dom_stylesheets.xpt
  • xulrunner/components/dom_svg.xpt
  • xulrunner/components/dom_traversal.xpt
  • xulrunner/components/dom_views.xpt
  • xulrunner/components/dom_xbl.xpt
  • xulrunner/components/dom_xpath.xpt
  • xulrunner/components/dom_xul.xpt
  • xulrunner/components/downloads.xpt
  • xulrunner/components/editor.xpt
  • xulrunner/components/embed_base.xpt
  • xulrunner/components/extensions.xpt
  • xulrunner/components/exthandler.xpt
  • xulrunner/components/fastfind.xpt
  • xulrunner/components/find.xpt
  • xulrunner/components/gfx.xpt
  • xulrunner/components/gksvgrenderer.xpt
  • xulrunner/components/history.xpt
  • xulrunner/components/htmlparser.xpt
  • xulrunner/components/imgicon.xpt
  • xulrunner/components/imglib2.xpt
  • xulrunner/components/intl.xpt
  • xulrunner/components/intlcmpt.xpt
  • xulrunner/components/jar.xpt
  • xulrunner/components/jsconsole-clhandler.js
    .js
  • xulrunner/components/jsconsole.xpt
  • xulrunner/components/jsdservice.xpt
  • xulrunner/components/layout_base.xpt
  • xulrunner/components/layout_printing.xpt
  • xulrunner/components/layout_xul.xpt
  • xulrunner/components/layout_xul_tree.xpt
  • xulrunner/components/locale.xpt
  • xulrunner/components/lwbrk.xpt
  • xulrunner/components/mimetype.xpt
  • xulrunner/components/mozbrwsr.xpt
  • xulrunner/components/mozfind.xpt
  • xulrunner/components/necko.xpt
  • xulrunner/components/necko_about.xpt
  • xulrunner/components/necko_cache.xpt
  • xulrunner/components/necko_cookie.xpt
  • xulrunner/components/necko_data.xpt
  • xulrunner/components/necko_dns.xpt
  • xulrunner/components/necko_file.xpt
  • xulrunner/components/necko_ftp.xpt
  • xulrunner/components/necko_http.xpt
  • xulrunner/components/necko_res.xpt
  • xulrunner/components/necko_socket.xpt
  • xulrunner/components/necko_strconv.xpt
  • xulrunner/components/necko_viewsource.xpt
  • xulrunner/components/nsCloseAllWindows.js
    .js
  • xulrunner/components/nsDefaultCLH.js
    .js
  • xulrunner/components/nsDictionary.js
    .js
  • xulrunner/components/nsExtensionManager.js
    .js
  • xulrunner/components/nsHelperAppDlg.js
    .js
  • xulrunner/components/nsInterfaceInfoToIDL.js
    .js
  • xulrunner/components/nsKillAll.js
    .js
  • xulrunner/components/nsPostUpdateWin.js
    .js
  • xulrunner/components/nsProgressDialog.js
    .js
  • xulrunner/components/nsProxyAutoConfig.js
    .js
  • xulrunner/components/nsResetPref.js
    .js
  • xulrunner/components/nsUpdateService.js
    .js
  • xulrunner/components/nsXULAppInstall.js
    .js
  • xulrunner/components/nsXmlRpcClient.js
    .js
  • xulrunner/components/oji.xpt
  • xulrunner/components/passwordmgr.xpt
  • xulrunner/components/pipboot.dll
    .dll windows:4 windows x86 arch:x86

    7b390842c70b863c9dda714f0f0021d6


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/pipboot.xpt
  • xulrunner/components/pipnss.dll
    .dll windows:4 windows x86 arch:x86

    e86b3daedd3e726208e036970eb71c27


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/pipnss.xpt
  • xulrunner/components/pippki.dll
    .dll windows:4 windows x86 arch:x86

    fa82a5980cfbb34023480d81d3095990


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/pippki.xpt
  • xulrunner/components/plugin.xpt
  • xulrunner/components/pref.xpt
  • xulrunner/components/prefetch.xpt
  • xulrunner/components/profile.xpt
  • xulrunner/components/progressDlg.xpt
  • xulrunner/components/proxyObject.xpt
  • xulrunner/components/rdf.xpt
  • xulrunner/components/satchel.xpt
  • xulrunner/components/shistory.xpt
  • xulrunner/components/toolkitprofile.xpt
  • xulrunner/components/transformiix.dll
    .dll windows:4 windows x86 arch:x86

    994e8f6ea8a5dca8ff343ff1861519b5


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/txmgr.xpt
  • xulrunner/components/txtsvc.xpt
  • xulrunner/components/uconv.xpt
  • xulrunner/components/unicharutil.xpt
  • xulrunner/components/universalchardet.dll
    .dll windows:4 windows x86 arch:x86

    ddfeb394a62f5bace0c785c83045176f


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/update.xpt
  • xulrunner/components/uriloader.xpt
  • xulrunner/components/webBrowser_core.xpt
  • xulrunner/components/webbrowserpersist.xpt
  • xulrunner/components/webshell_idls.xpt
  • xulrunner/components/websrvcs.dll
    .dll windows:4 windows x86 arch:x86

    7dd9a41cfe69206d565997f69e186256


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/websrvcs.xpt
  • xulrunner/components/widget.xpt
  • xulrunner/components/windowds.xpt
  • xulrunner/components/windowwatcher.xpt
  • xulrunner/components/xml-rpc.xpt
  • xulrunner/components/xmlextras.dll
    .dll windows:4 windows x86 arch:x86

    33f8328ea26e553dcf03be8b27af09c0


    Headers

    Imports

    Exports

    Sections

  • xulrunner/components/xmlextras.xpt
  • xulrunner/components/xpcom_base.xpt
  • xulrunner/components/xpcom_components.xpt
  • xulrunner/components/xpcom_ds.xpt
  • xulrunner/components/xpcom_io.xpt
  • xulrunner/components/xpcom_obsolete.xpt
  • xulrunner/components/xpcom_thread.xpt
  • xulrunner/components/xpcom_xpti.xpt
  • xulrunner/components/xpconnect.xpt
  • xulrunner/components/xpinstall.xpt
  • xulrunner/components/xulapp.xpt
  • xulrunner/components/xulapp_setup.xpt
  • xulrunner/components/xuldoc.xpt
  • xulrunner/components/xulrunner.xpt
  • xulrunner/components/xultmpl.xpt
  • xulrunner/components/xulutil.dll
    .dll windows:4 windows x86 arch:x86

    5f23d2ed6ee72ffff75fde1da8eb4c55


    Headers

    Imports

    Exports

    Sections

  • xulrunner/defaults/autoconfig/platform.js
  • xulrunner/defaults/autoconfig/prefcalls.js
    .js
  • xulrunner/defaults/pref/xulrunner.js
  • xulrunner/defaults/profile/US/chrome/userChrome-example.css
  • xulrunner/defaults/profile/US/chrome/userContent-example.css
  • xulrunner/defaults/profile/US/localstore.rdf
    .xml
  • xulrunner/defaults/profile/chrome/userChrome-example.css
  • xulrunner/defaults/profile/chrome/userContent-example.css
  • xulrunner/defaults/profile/extensions/Extensions.rdf
    .xml
  • xulrunner/defaults/profile/localstore.rdf
    .xml
  • xulrunner/dependentlibs.list
  • xulrunner/greprefs/all.js
  • xulrunner/greprefs/security-prefs.js
  • xulrunner/greprefs/xpinstall.js
  • xulrunner/javaxpcom.jar
    .jar
  • xulrunner/javaxpcomglue.dll
    .dll windows:4 windows x86 arch:x86

    a83aa55690c435f55601a2dffe81c8c9


    Headers

    Imports

    Exports

    Sections

  • xulrunner/js3250.dll
    .dll windows:4 windows x86 arch:x86

    c4d6ee079f4e4608f095ce969f8cf753


    Headers

    Imports

    Exports

    Sections

  • xulrunner/mozctl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    08b79f79900b584d70340384a932107c


    Headers

    Imports

    Exports

    Sections

  • xulrunner/mozctlx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4263a1c83336b0df38d3f5077deac467


    Headers

    Imports

    Exports

    Sections

  • xulrunner/nspr4.dll
    .dll windows:4 windows x86 arch:x86

    3bd3864b4f9612e00aca000820b7aae1


    Headers

    Imports

    Exports

    Sections

  • xulrunner/nss3.dll
    .dll windows:4 windows x86 arch:x86

    3936f531905d6d386fdcb5d7e57e6b17


    Headers

    Imports

    Exports

    Sections

  • xulrunner/nssckbi.dll
    .dll windows:4 windows x86 arch:x86

    91229bb36abe8e8f9edd067fa5f00639


    Headers

    Imports

    Exports

    Sections

  • xulrunner/plc4.dll
    .dll windows:4 windows x86 arch:x86

    938f4f42150becb4c12bb7ce8342b45d


    Headers

    Imports

    Exports

    Sections

  • xulrunner/plds4.dll
    .dll windows:4 windows x86 arch:x86

    22841338e90354c6958d96d80e4ca702


    Headers

    Imports

    Exports

    Sections

  • xulrunner/plugins/npnul32.dll
    .dll windows:4 windows x86 arch:x86

    e55b912bdcf9867fb6827417b166691e


    Headers

    Imports

    Exports

    Sections

  • xulrunner/res/EditorOverride.css
  • xulrunner/res/arrow.gif
    .gif
  • xulrunner/res/arrowd.gif
    .gif
  • xulrunner/res/bloatcycle.html
    .html .js polyglot
  • xulrunner/res/broken-image.gif
    .gif
  • xulrunner/res/charsetData.properties
  • xulrunner/res/charsetalias.properties
  • xulrunner/res/cmessage.txt
  • xulrunner/res/dtd/mathml.dtd
  • xulrunner/res/dtd/xhtml11.dtd
  • xulrunner/res/entityTables/html40Latin1.properties
  • xulrunner/res/entityTables/html40Special.properties
  • xulrunner/res/entityTables/html40Symbols.properties
  • xulrunner/res/entityTables/htmlEntityVersions.properties
  • xulrunner/res/entityTables/mathml20.properties
  • xulrunner/res/entityTables/transliterate.properties
  • xulrunner/res/fonts/fontEncoding.properties
  • xulrunner/res/fonts/fontNameMap.properties
  • xulrunner/res/fonts/mathfont.properties
  • xulrunner/res/fonts/mathfontCMEX10.properties
  • xulrunner/res/fonts/mathfontCMSY10.properties
  • xulrunner/res/fonts/mathfontMTExtra.properties
  • xulrunner/res/fonts/mathfontMath1.properties
  • xulrunner/res/fonts/mathfontMath2.properties
  • xulrunner/res/fonts/mathfontMath4.properties
  • xulrunner/res/fonts/mathfontPUA.properties
  • xulrunner/res/fonts/mathfontSymbol.properties
  • xulrunner/res/forms.css
  • xulrunner/res/grabber.gif
    .gif
  • xulrunner/res/hiddenWindow.html
    .html
  • xulrunner/res/html.css
  • xulrunner/res/html/gopher-audio.gif
    .gif
  • xulrunner/res/html/gopher-binary.gif
    .gif
  • xulrunner/res/html/gopher-find.gif
    .gif
  • xulrunner/res/html/gopher-image.gif
    .gif
  • xulrunner/res/html/gopher-menu.gif
    .gif
  • xulrunner/res/html/gopher-movie.gif
    .gif
  • xulrunner/res/html/gopher-sound.gif
    .gif
  • xulrunner/res/html/gopher-telnet.gif
    .gif
  • xulrunner/res/html/gopher-text.gif
    .gif
  • xulrunner/res/html/gopher-unknown.gif
    .gif
  • xulrunner/res/langGroups.properties
  • xulrunner/res/language.properties
  • xulrunner/res/loading-image.gif
    .gif
  • xulrunner/res/mathml.css
  • xulrunner/res/quirk.css
  • xulrunner/res/svg.css
  • xulrunner/res/table-add-column-after-active.gif
    .gif
  • xulrunner/res/table-add-column-after-hover.gif
    .gif
  • xulrunner/res/table-add-column-after.gif
    .gif
  • xulrunner/res/table-add-column-before-active.gif
    .gif
  • xulrunner/res/table-add-column-before-hover.gif
    .gif
  • xulrunner/res/table-add-column-before.gif
    .gif
  • xulrunner/res/table-add-row-after-active.gif
    .gif
  • xulrunner/res/table-add-row-after-hover.gif
    .gif
  • xulrunner/res/table-add-row-after.gif
    .gif
  • xulrunner/res/table-add-row-before-active.gif
    .gif
  • xulrunner/res/table-add-row-before-hover.gif
    .gif
  • xulrunner/res/table-add-row-before.gif
    .gif
  • xulrunner/res/table-remove-column-active.gif
    .gif
  • xulrunner/res/table-remove-column-hover.gif
    .gif
  • xulrunner/res/table-remove-column.gif
    .gif
  • xulrunner/res/table-remove-row-active.gif
    .gif
  • xulrunner/res/table-remove-row-hover.gif
    .gif
  • xulrunner/res/table-remove-row.gif
    .gif
  • xulrunner/res/ua.css
  • xulrunner/res/viewer.properties
  • xulrunner/res/viewsource.css
  • xulrunner/res/wincharset.properties
  • xulrunner/sdk/lib/MozillaInterfaces-src.jar
    .jar
  • xulrunner/sdk/lib/MozillaInterfaces.jar
    .jar
  • xulrunner/smime3.dll
    .dll windows:4 windows x86 arch:x86

    99dcbb1355995b0c09eec547e41beb2c


    Headers

    Imports

    Exports

    Sections

  • xulrunner/softokn3.chk
  • xulrunner/softokn3.dll
    .dll windows:4 windows x86 arch:x86

    29e88c31755e9a0852457b5038394884


    Headers

    Imports

    Exports

    Sections

  • xulrunner/ssl3.dll
    .dll windows:4 windows x86 arch:x86

    a8c8ddade65f7eeb6ec93dafc3db070f


    Headers

    Imports

    Exports

    Sections

  • xulrunner/uninstall/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9b717a28416bf1ecdfd42277c5420c65


    Headers

    Imports

    Sections

  • xulrunner/updater.exe
    .exe windows:4 windows x86 arch:x86

    19c764ff53c94b6501431de8336ef4ed


    Headers

    Imports

    Sections

  • xulrunner/xpcom.dll
    .dll windows:4 windows x86 arch:x86

    3a51eb8bb6f79c3d540f1cd4a773cdd7


    Headers

    Imports

    Exports

    Sections

  • xulrunner/xpicleanup.exe
    .exe windows:4 windows x86 arch:x86

    263b0e007b25e527eb6865b0c55f434d


    Headers

    Imports

    Exports

    Sections

  • xulrunner/xul.dll
    .dll windows:4 windows x86 arch:x86

    083824eb099eadf8d2b4a3050ae55bc3


    Headers

    Imports

    Exports

    Sections

  • xulrunner/xulrunner-stub.exe
    .exe windows:4 windows x86 arch:x86

    d284bb7ae6f473acf96fea3cd5ad3ef9


    Headers

    Imports

    Exports

    Sections

  • xulrunner/xulrunner.exe
    .exe windows:4 windows x86 arch:x86

    c92d553ba7d439ff859fa551986d4841


    Headers

    Imports

    Sections