General

  • Target

    SecuriteInfo.com.Win32.Adware-gen.4366.267.exe

  • Size

    1.3MB

  • MD5

    07a8409e2088d806c791bfd9fe37c7c7

  • SHA1

    b74ad72ff290051a56b16c3608b7f0b6fa948106

  • SHA256

    4845ac4d2463baec439182907e66fd1069b9ad7781dfd15d906d0c5200eed852

  • SHA512

    52320388fb2521a1cfba860dc9afe5bcd6280f053f3f018b322b38d4edc7779b9b8314b8107982bcdd146065c16e70190c3133c6991484f184ff2dee30d3209b

  • SSDEEP

    24576:0qyxzaRmJWD1D7iCVdmboAIerAf4AQdKihOmurwY111C9z:JOziwWhXiCHmpIerAQPKAOmukY13C9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • SecuriteInfo.com.Win32.Adware-gen.4366.267.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • declare.exe
    .exe windows:5 windows x86 arch:x86

    c6fd1ba2147e82a6340518c7d739ac28


    Code Sign

    Headers

    Imports

    Sections

  • iconAnimate.exe
    .exe windows:5 windows x86 arch:x86

    12cef7068fc6baac4b938be8efb7baf5


    Code Sign

    Headers

    Imports

    Sections

  • iconTips.exe
    .exe windows:5 windows x86 arch:x86

    c14fdecedcfdb4bcc3211f33330ca78e


    Code Sign

    Headers

    Imports

    Sections

  • lander.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WizModernImage.bmp
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections