General

  • Target

    44e6c9ad52f0af613dcdd233122a814515e1bef07e7ad3a51d7fdf9c4d58b020

  • Size

    9.5MB

  • MD5

    0edcbcedfbf4b406a77ea0ce97006e03

  • SHA1

    7ddb1f9f9525def3e08a4a5ff88839fcf677fee1

  • SHA256

    44e6c9ad52f0af613dcdd233122a814515e1bef07e7ad3a51d7fdf9c4d58b020

  • SHA512

    5a797a6ebc5efa89c1b83b324c29a5228a3286d659c0fdde0ab86d404b19d6c493526b6bbe9901e8c4b34cd87dc07f72d864fc3bdba51554526e1c29f0a0b486

  • SSDEEP

    196608:DFCnSgbc3qbfGCPmDg6y0dKCadOUW6qBsZXjAQmr:DFCnS+cabueL0IoB6qyZkQy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 44e6c9ad52f0af613dcdd233122a814515e1bef07e7ad3a51d7fdf9c4d58b020
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/insthelper.dll
    .dll windows:5 windows x86 arch:x86

    5586b694e0a3109f9bd9f3a899e9353d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res/skin/ask_icon.png
    .png
  • $PLUGINSDIR/res/skin/btn_blue_90_30.png
    .png
  • $PLUGINSDIR/res/skin/btn_close.png
    .png
  • $PLUGINSDIR/res/skin/btn_push.png
    .png
  • $PLUGINSDIR/res/skin/btn_white_90_30.png
    .png
  • $PLUGINSDIR/res/skin/checkbox.png
    .png
  • $PLUGINSDIR/res/skin/checkout.png
    .png
  • $PLUGINSDIR/res/skin/done.png
    .png
  • $PLUGINSDIR/res/skin/dot_down.png
    .png
  • $PLUGINSDIR/res/skin/dot_up.png
    .png
  • $PLUGINSDIR/res/skin/error.png
    .png
  • $PLUGINSDIR/res/skin/gb.png
    .png
  • $PLUGINSDIR/res/skin/ic_info_46.png
    .png
  • $PLUGINSDIR/res/skin/slogen.png
    .png
  • $PLUGINSDIR/res/skin/title_icon_image.png
    .png
  • $PLUGINSDIR/res/skin/triangle.png
    .png
  • PacketDotNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • node.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections