General

  • Target

    282f2394cc30c84043db7c2bb98b94ca2c1e4457542638666fb20d5660f50f0dN

  • Size

    9.0MB

  • MD5

    921bd9d87d1d1b50f8000e4118141380

  • SHA1

    ea240f9498e285045a252bedbb22c9876cf15bb8

  • SHA256

    282f2394cc30c84043db7c2bb98b94ca2c1e4457542638666fb20d5660f50f0d

  • SHA512

    c83244c0f6521fc45b3547867a46291fdb322cc29139fa80e457cc579dccc3cdd30d93c975863d855b190a42ce111ed7f2b484c6857bbea79832346f9cfaa992

  • SSDEEP

    196608:RGrKnw22tsBLQ4CnHjdWspCIv/R6/NamA6SHMUhlB6089fqHetCu9:RqKnwXhHyIv/R6/rA6SsYo0+ou9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 282f2394cc30c84043db7c2bb98b94ca2c1e4457542638666fb20d5660f50f0dN
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BDMSkin.dll
    .dll windows:4 windows x86 arch:x86

    fabf538d5ae7658080af06bc36ca4046


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    671625f3be296377c78ce0272ba81339


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • $PLUGINSDIR/Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • $PLUGINSDIR/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SkinResources/$R0
    .exe windows:5 windows x86 arch:x86

    2c249b0e6e58031d6f455ddf67bc0098


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SkinResources/$WINDIR/Temp/baidu/youqian/YouQian_Setup.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    48daa7cfcda2ca6235e50dff8e162009


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/7z.dll
    .dll windows:4 windows x86 arch:x86

    102033a12b8cf17a451a9e9760020138


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDArKit.sys
    .sys windows:6 windows x86 arch:x86

    07279685da4954f85c88454a671b2291


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/BDKitUtils.dll
    .dll windows:4 windows x86 arch:x86

    e14f3315ed9642a424429ecb2ed02934


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDLogicUtils.dll
    .dll windows:4 windows x86 arch:x86

    6a1c8a7dc59e6b0d91f5e33b39f57c74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDMDownload.dll
    .dll windows:4 windows x86 arch:x86

    309ba3856a3e41f643b10d60fcd9ba08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDMNet.dll
    .dll windows:4 windows x86 arch:x86

    d2c16a3d96f4faf2ab637fa8d6ad9d6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDMReport.dll
    .dll windows:4 windows x86 arch:x86

    f3943b53e66a7377137a9b8d258f060a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDMWrench.sys
    .sys windows:6 windows x86 arch:x86

    12f961acddf0f747a51b89ec425e5cb9


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/BDSGBugRpt.exe
    .exe windows:4 windows x86 arch:x86

    8e4a0951059da32a3bf0bdb7c37ffb00


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/BDSGReportPlugin.dll
    .dll windows:4 windows x86 arch:x86

    cead31fc71f8fe037fb47d2f16f4441a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/BDSGRtpDyn_ContainerConfig.xml
  • $PLUGINSDIR/file/BDSGRtpDyn_PluginConfig.xml
  • $PLUGINSDIR/file/BDSGRtp_ContainerConfig.xml
  • $PLUGINSDIR/file/BDSGRtp_PluginConfig.xml
  • $PLUGINSDIR/file/BDSafeBrowser.sys
    .sys windows:6 windows x86 arch:x86

    9f4a34d247e33397ac4f668c84251a67


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/BaiduProtect.exe
    .exe windows:4 windows x86 arch:x86

    6c830eb10d61bbbfdd0cea6253601861


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/DriverManager.dll
    .dll windows:4 windows x86 arch:x86

    6d0e11429bee27b9b1eefd896d388f46


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/HIPS.dll
    .dll windows:4 windows x86 arch:x86

    8886962aae8f2202187c422943d7fa65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/SafeBrowserDll.dll
    .dll windows:4 windows x86 arch:x86

    998b25e345b8494f286040f263d372ab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/SafeBrowserHelper.dll
    .dll windows:5 windows x86 arch:x86

    2cf5877d59a3806f419c30cef41da1f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/SafeExplorer.dll
    .dll windows:4 windows x86 arch:x86

    5e51bf13626f3044fdafcca5ed972b47


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/SafeExplorer_x64.dll
    .dll windows:4 windows x64 arch:x64

    bd4447c43f1454b501ec3901fb2a454d


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/ad.dll
    .dll windows:4 windows x86 arch:x86

    c127581a2ac6adb29e94cc4620599c47


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/app.ico
  • $PLUGINSDIR/file/baiduanRepair.dll
    .dll windows:4 windows x86 arch:x86

    2bafe2e2a43bab1f3a5c25e4790389da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/baidusdRepair.dll
    .dll windows:4 windows x86 arch:x86

    2ac213d0cb4093c040bc2e61c78dc95b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/file/bd0001.sys
    .sys windows:5 windows x86 arch:x86

    84a56d4ae69a1e7fb212453a82970a9c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/bd0004.sys
    .sys windows:5 windows x86 arch:x86

    e871246404b05e5e7411346b0638315c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/bdsg0001.dll
    .dll windows:4 windows x86 arch:x86

    d45f8e5a2be019265adfa153e9ffdef4


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/bdsg0002.dll
    .dll windows:4 windows x64 arch:x64

    6fbac83f5f6cd0dff031bcf2ad66e376


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/file/fileverify.xml
  • $PLUGINSDIR/file/hips.xml
  • $PLUGINSDIR/file/safebrowser.xml
  • $PLUGINSDIR/file/uninst.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    48daa7cfcda2ca6235e50dff8e162009


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_3_/$_4_/$_3_/$_4_/uninst_.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallHelper.dll
    .dll windows:4 windows x86 arch:x86

    48daa7cfcda2ca6235e50dff8e162009


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/file/{B6D93053-0CAA-4725-A6EB-C7D0FB56BE89}_PluginConfig.xml
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dynplugins/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • dynplugins/Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • dynplugins/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • dynplugins/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • dynplugins/Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dynplugins/Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VC80.ATL/Microsoft.VC80.ATL.manifest
    .xml
  • plugins/Microsoft.VC80.ATL/atl80.dll
    .dll windows:4 windows x86 arch:x86

    00c6e566e88c3d07ddc376fe4ce83c5f


    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
  • plugins/Microsoft.VC80.CRT/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    83e6ecedcb8a69cca8d85e1481140fa0


    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VC80.CRT/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VC80.CRT/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SkinResources/$WINDIR/Temp/baidu/youqian/process.cfg
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduInstall.ico
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduSoftInstall.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduYQSelPathWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduYQTitleShow.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/BaiduYQlog.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Button.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Create_Setup.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/DownloadTask.xml
  • $PLUGINSDIR/SkinResources/CommonRes/ImportBookMark_checkbox_not_selected.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/InstallBaiduYQWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/InstallWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/MainFrame.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/MainProgressAnim.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/SelectInstallModTitle.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/SelectInstallPath.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Title_btn_close.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/Triangle.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/UnInstallComplete.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/UnInstallWnd.xml
    .xml
  • $PLUGINSDIR/SkinResources/CommonRes/appicon.ico
  • $PLUGINSDIR/SkinResources/CommonRes/checkoff_box.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/checkon_box.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/dlgframe_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/download_progress_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/download_progress_fg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/editcontrol.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/folder_button.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/frame_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/frame_inner.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/information.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/loading_progress.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/logo_48.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/main_favdir_test.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/main_menu_edit_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/main_menu_support_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/mainpage_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/mainpage_background_bottom.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/menu_frame_background.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/new.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/progress_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/progress_fg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/project_bar_3_14.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbar.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbar_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbarh.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/scrollbk.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/status_bar_bg.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/sys_btn_close.png
    .png
  • $PLUGINSDIR/SkinResources/CommonRes/sys_btn_minimize.png
    .png