General

  • Target

    63e7f39c80f422f24278d70e21dd92de11b816f677feadd879aa1a8dd7bf36eaN

  • Size

    694KB

  • MD5

    27d2225b594e16956b3118dc7f9d01e0

  • SHA1

    27d0f5080af17f91eec2f5503e1be2eec980856a

  • SHA256

    63e7f39c80f422f24278d70e21dd92de11b816f677feadd879aa1a8dd7bf36ea

  • SHA512

    b8cceeea51e06a177c0e0717b6e653a0e3b6eed78c548035d5b9b05a97572900244f38b7c8eeb08472e0d973c63eb178cc6d31510c0c858e0966f93338412313

  • SSDEEP

    12288:tuwR22xJJJ5NlSy4tDVta0Ndgpcni6bdzKMYA1icWNg5/cpGhrtqFF:kwAgRPIyyJtpNuii6bdzKgicN5MJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 63e7f39c80f422f24278d70e21dd92de11b816f677feadd879aa1a8dd7bf36eaN
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstPath.ini
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WelcomePage.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $TEMP/installpathcn.bmp
  • $TEMP/installpathen.bmp
  • $TEMP/instpath.ini
  • $TEMP/partner.ini
  • $TEMP/welcomepage.ini
  • CrashReport.exe
    .exe windows:4 windows x86 arch:x86

    8bca52273b45caff2bb4e2747f2262a1


    Code Sign

    Headers

    Imports

    Sections

  • Encrypt.dll
    .dll windows:4 windows x86 arch:x86

    9db75371d7554a8ca5b7e27a94fca919


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Funshion.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections