General

  • Target

    44795e52c8dc01ffd12f46860c846d2fb4c96590460f203de1ba7b0cef7488a8N.exe

  • Size

    2.7MB

  • MD5

    ea86c29af63ae7abba49ccdaf764a410

  • SHA1

    0f612e4c32ffc51195a2cfa47d2662cf2d6746f5

  • SHA256

    44795e52c8dc01ffd12f46860c846d2fb4c96590460f203de1ba7b0cef7488a8

  • SHA512

    a8415f795378b6cc8fa9ebe6fcb3465bf0cb842eef3a7095da7b6c770272410d178a7052cad7ea7979bed440fac528796845192ffd2fb91a7cf345c2aa6cd737

  • SSDEEP

    49152:RGbfKn/I20ni4HqK4VZ5xdzBLG14EGLA59oLTVm/6/qQXlwQr:RGbfKnw22tz4BLQ4EGLM9ocHomK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 44795e52c8dc01ffd12f46860c846d2fb4c96590460f203de1ba7b0cef7488a8N.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BDMSkin.dll
    .dll windows:4 windows x86 arch:x86

    fabf538d5ae7658080af06bc36ca4046


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    671625f3be296377c78ce0272ba81339


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • $PLUGINSDIR/Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • $PLUGINSDIR/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SkinResources/$WINDIR/Temp/baidu/youqian/YouQian_Setup.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    48daa7cfcda2ca6235e50dff8e162009


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDSGReportPlugin.dll
    .dll windows:4 windows x86 arch:x86

    cead31fc71f8fe037fb47d2f16f4441a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDSGRtpDyn_ContainerConfig.xml
  • $PLUGINSDIR/file/BDSGRtpDyn_PluginConfig.xml
  • $PLUGINSDIR/file/BDSGRtp_ContainerConfig.xml
  • $PLUGINSDIR/file/BDSGRtp_PluginConfig.xml
  • $PLUGINSDIR/file/HIPS.dll
    .dll windows:4 windows x86 arch:x86

    8886962aae8f2202187c422943d7fa65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/baiduanRepair.dll
    .dll windows:4 windows x86 arch:x86

    2bafe2e2a43bab1f3a5c25e4790389da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/baidusdRepair.dll
    .dll windows:4 windows x86 arch:x86

    2ac213d0cb4093c040bc2e61c78dc95b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/{B6D93053-0CAA-4725-A6EB-C7D0FB56BE89}_PluginConfig.xml
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • dynplugins/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • dynplugins/Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • dynplugins/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • dynplugins/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • plugins/Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • plugins/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SkinResources/$WINDIR/Temp/baidu/youqian/process.cfg
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduInstall.ico
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduSoftInstall.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduYQSelPathWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduYQTitleShow.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduYQlog.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Button.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Create_Setup.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/DownloadTask.xml
  • $PLUGINSDIR/SkinResources/CommonRes/ImportBookMark_checkbox_not_selected.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/InstallBaiduYQWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/InstallWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/MainFrame.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/MainProgressAnim.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/SelectInstallModTitle.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/SelectInstallPath.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Title_btn_close.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Triangle.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/UnInstallComplete.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/UnInstallWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/appicon.ico
  • $PLUGINSDIR/SkinResources/CommonRes/checkoff_box.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/checkon_box.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/dlgframe_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/download_progress_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/download_progress_fg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/editcontrol.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/folder_button.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/frame_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/frame_inner.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/information.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/loading_progress.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/logo_48.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/main_favdir_test.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/main_menu_edit_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/main_menu_support_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/mainpage_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/mainpage_background_bottom.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/menu_frame_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/new.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/progress_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/progress_fg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/project_bar_3_14.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbar.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbar_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbarh.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbk.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/status_bar_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/sys_btn_close.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/sys_btn_minimize.png
    .png