General

  • Target

    agena-4.0.2-win32-setup.exe

  • Size

    8.8MB

  • MD5

    382efb4ff4203d321fc03bf1b325e492

  • SHA1

    116bf36c1d8ff1942f714feb4281db859d1befd6

  • SHA256

    ef64818f666bcdce7cef2e2b0385db5643c49168b6dd5d4aa609e72d245ac4bb

  • SHA512

    7c4636c8157e42430f43abe86a91d7c2aeef9b852d973261a910073a4d13601f5b3369a8de487204c7d03cc743f2940a440be0fcbb47a746f102326647f51d0d

  • SSDEEP

    196608:MmN0b4GBN/ZhSCpXRuVmRZuSh7Fw9vtLGZN476E2HlHwlU:MzMGrZhSCpamj3e9wQ76delU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 55 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • agena-4.0.2-win32-setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    b1a57b635b23ffd553b3fd1e0960b2bd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvSplash.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    da6e0c8bab74788d6ef30c9be92c12a1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    0ddbc7ffccf920bda2ba718277436780


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    87cef8501ab86470cdb266e427b811c4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • bin/aedit256.ico
  • bin/agena.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    319e1d5c3d822956b32c24bcf45b6511


    Headers

    Imports

    Exports

    Sections

  • bin/agena.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    19cfc5f55c7159f10f1852112e0c9d8f


    Headers

    Imports

    Sections

  • bin/agena256.ico
  • bin/agenaedit.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    8d68ba32a14488102751e327b2f63f5d


    Headers

    Imports

    Sections

  • bin/change.log
  • bin/freetype6.dll
    .dll windows:4 windows x86 arch:x86

    f0fdb14f90c93ef898c479e7c9f3b1a1


    Headers

    Imports

    Exports

    Sections

  • bin/jpeg62.dll
    .dll windows:4 windows x86 arch:x86

    195ed063abe4d272b98b5adc8d072fb8


    Headers

    Imports

    Exports

    Sections

  • bin/libexpat-1.dll
    .dll windows:4 windows x86 arch:x86

    b1629fef7c147f89e0d210ee93cc75ae


    Headers

    Imports

    Exports

    Sections

  • bin/libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    3ad90f4d80969a4c993fca268c3faef1


    Headers

    Imports

    Exports

    Sections

  • bin/libgd2.dll
    .dll windows:4 windows x86 arch:x86

    b22cbf478609887189f9c060988c494b


    Headers

    Imports

    Exports

    Sections

  • bin/libgmp-10.dll
    .dll windows:4 windows x86 arch:x86

    2bcd126dd23c4394fbdd6b514a144636


    Headers

    Imports

    Exports

    Sections

  • bin/libiconv-2.dll
    .dll windows:4 windows x86 arch:x86

    7325c97b9e2b98f160ae19c0c55dae45


    Headers

    Imports

    Exports

    Sections

  • bin/libiconv2.dll
    .dll windows:4 windows x86 arch:x86

    7325c97b9e2b98f160ae19c0c55dae45


    Headers

    Imports

    Exports

    Sections

  • bin/libmingwex-0.dll
    .dll windows:4 windows x86 arch:x86

    164b103728f50af7246ba33db141ab24


    Headers

    Imports

    Exports

    Sections

  • bin/libmingwex-4.dll
    .dll windows:4 windows x86 arch:x86

    d7e904dc073433a891c143b2d9fc2494


    Headers

    Imports

    Exports

    Sections

  • bin/libmpfr-6.dll
    .dll windows:4 windows x86 arch:x86

    f2d835eafc246dee4141e0425e01249b


    Headers

    Imports

    Exports

    Sections

  • bin/libpcre2-8-0.dll
    .dll windows:4 windows x86 arch:x86

    e98bcb554e848a7047a2106559807c9c


    Headers

    Imports

    Exports

    Sections

  • bin/libpcre2-posix-3.dll
    .dll windows:4 windows x86 arch:x86

    9015e891961dfd0456b052c910367874


    Headers

    Imports

    Exports

    Sections

  • bin/libpng13.dll
    .dll windows:4 windows x86 arch:x86

    66f9cb3d68cd5d2ea55efc9413c08628


    Headers

    Imports

    Exports

    Sections

  • bin/libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    389fbd39021c0cf911f7729ed278b9f7


    Headers

    Imports

    Exports

    Sections

  • bin/libusb-1.0.dll
    .dll windows:4 windows x86 arch:x86

    dd2881e17c9d79d543ae5c6d322aba5b


    Headers

    Imports

    Exports

    Sections

  • bin/licence
  • bin/xpm4.dll
    .dll windows:4 windows x86 arch:x86

    cc114267bc84893048a63ed51e593f4c


    Headers

    Imports

    Exports

    Sections

  • bin/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    0a94ba77948021de7631efb037fc9c44


    Headers

    Imports

    Exports

    Sections

  • data/langreg.csv
  • doc/agena-crashcourse.pdf
    .pdf
  • doc/agena.pdf
    .pdf
  • doc/agena.xls
    .xls windows office2003
  • doc/ascii.xls
    .xls windows office2003
  • doc/regex.txt
  • lib/aconv.dll
    .dll windows:4 windows x86 arch:x86

    97686028009aaa86393b4b815cf3ed65


    Headers

    Imports

    Exports

    Sections

  • lib/ads.agn
  • lib/ads.dll
    .dll windows:4 windows x86 arch:x86

    28415e12c6dceb54a8f12687ca217005


    Headers

    Imports

    Exports

    Sections

  • lib/agenaini.spl
  • lib/ansi.agn
  • lib/astro.agn
  • lib/astro.dll
    .dll windows:4 windows x86 arch:x86

    511d4a3ed987fa9acc91db3e78959bca


    Headers

    Imports

    Exports

    Sections

  • lib/bimaps.agn
  • lib/bloom.dll
    .dll windows:4 windows x86 arch:x86

    d0be752dc5e97e209beeb0ad8f4049bd


    Headers

    Imports

    Exports

    Sections

  • lib/clock.agn
  • lib/clock.dll
    .dll windows:4 windows x86 arch:x86

    b97ab7c899e2fae7c4b984542238db82


    Headers

    Imports

    Exports

    Sections

  • lib/com.dll
    .dll windows:4 windows x86 arch:x86

    8ac8b159d5f3b1f56910fb5a46c08506


    Headers

    Imports

    Exports

    Sections

  • lib/compat.agn
  • lib/cordic.dll
    .dll windows:4 windows x86 arch:x86

    b987e13ab58509cf551f7cd8f6d01454


    Headers

    Imports

    Exports

    Sections

  • lib/cuckoo.dll
    .dll windows:4 windows x86 arch:x86

    44de4b58b3014863a009fd0327bf43f4


    Headers

    Imports

    Exports

    Sections

  • lib/divs.agn
  • lib/double.agn
  • lib/double.dll
    .dll windows:4 windows x86 arch:x86

    0f951d7401dd2657a1e7708cff2c87fc


    Headers

    Imports

    Exports

    Sections

  • lib/dual.agn
  • lib/dual.dll
    .dll windows:4 windows x86 arch:x86

    2b811c653a9e1ebd3252eaf1aa814be9


    Headers

    Imports

    Exports

    Sections

  • lib/fastmath.dll
    .dll windows:4 windows x86 arch:x86

    771b65c18ace4726ea1825671cecdccc


    Headers

    Imports

    Exports

    Sections

  • lib/fractals.agn
  • lib/fractals.dll
    .dll windows:4 windows x86 arch:x86

    9ceda54e17f21d6c06985390b3997b3f


    Headers

    Imports

    Exports

    Sections

  • lib/gdi.agn
  • lib/gdi.dll
    .dll windows:4 windows x86 arch:x86

    f968744389ccbd7421bb942a5ac84884


    Headers

    Imports

    Exports

    Sections

  • lib/gzip.dll
    .dll windows:4 windows x86 arch:x86

    84782d16476e3c955c6904dabd13ad87


    Headers

    Imports

    Exports

    Sections

  • lib/hashes.agn
  • lib/hashes.dll
    .dll windows:4 windows x86 arch:x86

    e530a7bc7a9c718cb9c479d6d6c56f8e


    Headers

    Imports

    Exports

    Sections

  • lib/heaps.agn
  • lib/heaps.dll
    .dll windows:4 windows x86 arch:x86

    e0a43a0af0c2b7aca5382bee386c9e94


    Headers

    Imports

    Exports

    Sections

  • lib/json.agn
  • lib/library.agn
  • lib/mapm.agn
  • lib/mapm.dll
    .dll windows:4 windows x86 arch:x86

    62e99c08938b3c701079ab7d0fba9ec7


    Headers

    Imports

    Exports

    Sections

  • lib/mp.agn
  • lib/mp.dll
    .dll windows:4 windows x86 arch:x86

    40a088216bc2eb127a4ce11b0f28e281


    Headers

    Imports

    Exports

    Sections

  • lib/mpf.agn
  • lib/mpf.dll
    .dll windows:4 windows x86 arch:x86

    5f3bbb7b90ba532b6be2fd5277f7876c


    Headers

    Imports

    Exports

    Sections

  • lib/net.agn
  • lib/net.dll
    .dll windows:4 windows x86 arch:x86

    8da0bd1b3f6ac1fb95b5183c8d492266


    Headers

    Imports

    Exports

    Sections

  • lib/rbtree.dll
    .dll windows:4 windows x86 arch:x86

    3db9c870423449310a62bda6be1932fe


    Headers

    Imports

    Exports

    Sections

  • lib/regex.dll
    .dll windows:4 windows x86 arch:x86

    5406e1eab41254914dd8691e24a292a1


    Headers

    Imports

    Exports

    Sections

  • lib/skycrane.agn
  • lib/skycrane.dll
    .dll windows:4 windows x86 arch:x86

    6d3965f9da091c6b01b2f9613635ba82


    Headers

    Imports

    Exports

    Sections

  • lib/tar.agn
  • lib/telex.agn
  • lib/testlib.dll
    .dll windows:4 windows x86 arch:x86

    c91337bf206dc0cd8a3995aa8b464cbf


    Headers

    Imports

    Exports

    Sections

  • lib/usb.dll
    .dll windows:4 windows x86 arch:x86

    b9375fd188125b72c974db03cabf8228


    Headers

    Imports

    Exports

    Sections

  • lib/xml.agn
  • lib/xml.dll
    .dll windows:4 windows x86 arch:x86

    ec1bddf4836113b92d38440450d52bf2


    Headers

    Imports

    Exports

    Sections

  • lib/zx.dll
    .dll windows:4 windows x86 arch:x86

    87693a36e03d52fee21fa08604d5eab4


    Headers

    Imports

    Exports

    Sections

  • share/icons/aedit256.ico
  • share/icons/agena256.ico
  • share/icons/agena64x64.ico
  • share/icons/agena8b.ico
  • share/icons/agenasmall.ico
  • share/schemes/agena.dat
    .vbs
  • share/schemes/agena.lang
    .xml
  • share/schemes/agena.sch
  • share/schemes/agena.xml
    .xml
  • share/schemes/nedit.rc
  • share/schemes/nedit.rc.solaris
  • share/schemes/readme.txt
  • share/scripting/getopt.agn
  • share/scripting/ln.agn
  • share/scripting/whereis.agn
    .sh linux
  • share/scripting/whereis.bat
  • share/scripting/whereis.cmd
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b1a57b635b23ffd553b3fd1e0960b2bd


    Headers

    Imports

    Sections