General

  • Target

    SecuriteInfo.com.Win32.Malware-gen.27948.29630.exe

  • Size

    2.0MB

  • MD5

    e17a7a397c2f48833f9cd8bbaf77c7c4

  • SHA1

    31e7a185ff2494723c286146d7bd71607bd03f37

  • SHA256

    b8a77017589c3b415381d102a97085d1403d594c08440cac11815bbd58929e90

  • SHA512

    ea004994f581e89f0d042f0be4448e6a6bbcb5ab537f28561a5477d037e94aeae9c4c467f9d953040edfd5570937a8da849563385563f160ec99e1648f4249ec

  • SSDEEP

    49152:8ttt1XBDX06Z/Rvcs8W0JrrjtmuqFXG+Nzx8SeLgSAh/W2YJC:OXhX06lRvcPW0J/tq9GdEzZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • SecuriteInfo.com.Win32.Malware-gen.27948.29630.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    b4b50f01529bb76779ed95a70fbeb1eb


    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    84cd1ddf0ce9c6a74d331bc445074f42


    Headers

    Imports

    Sections

  • jtfs.exe
    .exe windows:5 windows x86 arch:x86

    ce28cb6482a56b497faf1a80dbad0ac1


    Code Sign

    Headers

    Imports

    Sections

  • lander.ini
  • uninst.exe.nsis