General

  • Target
    7299e457e752f8fa4e7eb9e921c2a38f3dd634306f58730cc6aeb929c7fe858a
  • Size 6.7MB
  • Sample260529-cbcsxaax3m
  • SHA256 7299e457e752f8fa4e7eb9e921c2a38f3dd634306f58730cc6aeb929c7fe858a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 7299e457e752f8fa4e7eb9e921c2a38f3dd634306f58730cc6aeb929c7fe858a
    .exe 6.7MB
  • $PLUGINSDIR/AccessControl.dll
    .dll 24KB
  • $PLUGINSDIR/JxNsis.dll
    .dll 2.7MB
  • $PLUGINSDIR/System.dll
    .dll 25KB
  • $PLUGINSDIR/nsExec.dll
    .dll 16KB
  • $PLUGINSDIR/setupdll.dll
    .dll 2.3MB
  • $PLUGINSDIR/uires/Translator/lang_cn.xml
    4KB
  • $PLUGINSDIR/uires/Translator/lang_en.xml
    21KB
  • $PLUGINSDIR/uires/Translator/lang_en.xml.bak
    21KB
  • $PLUGINSDIR/uires/image/ani_loading.png
    .png 4KB
  • $PLUGINSDIR/uires/image/bg_shaowBorder.png
    .png 1KB
  • $PLUGINSDIR/uires/image/bkg_change_dir.png
    .png 415B
  • $PLUGINSDIR/uires/image/bkg_finish.png
    .png 40KB
  • $PLUGINSDIR/uires/image/bkg_install.png
    .png 189KB
  • $PLUGINSDIR/uires/image/bkg_install2.png
    .png 136KB
  • $PLUGINSDIR/uires/image/btn_cancel.png
    .png 1KB
  • $PLUGINSDIR/uires/image/btn_change_dir.png
    .png 2KB
  • $PLUGINSDIR/uires/image/btn_close.png
    .png 831B
  • $PLUGINSDIR/uires/image/btn_custominstall.png
    .png 1KB
  • $PLUGINSDIR/uires/image/btn_install.png
    .png 14KB
  • $PLUGINSDIR/uires/image/btn_install2.png
    .png 1KB
  • $PLUGINSDIR/uires/image/btn_min.png
    .png 372B
  • $PLUGINSDIR/uires/image/btn_tip_close.png
    .png 863B
  • $PLUGINSDIR/uires/image/btn_tip_normal.png
    .png 7KB
  • $PLUGINSDIR/uires/image/btn_tip_strong.png
    .png 7KB
  • $PLUGINSDIR/uires/image/check_box.png
    .png 1KB
  • $PLUGINSDIR/uires/image/chk_agreement.png
    .png 1KB
  • $PLUGINSDIR/uires/image/logo.ico
    249KB
  • $PLUGINSDIR/uires/image/logo_install.ico
    391KB
  • $PLUGINSDIR/uires/image/logo_title.png
    .png 932B
  • $PLUGINSDIR/uires/image/progress_empty.png
    .png 211B
  • $PLUGINSDIR/uires/image/progress_full.png
    .png 310B
  • $PLUGINSDIR/uires/image/scroll_bar2.png
    .png 1KB
  • $PLUGINSDIR/uires/image/top-close.png
    .png 911B
  • $PLUGINSDIR/uires/image/un_progress1.png
    .png 211B
  • $PLUGINSDIR/uires/image/un_progress2.png
    .png 189B
  • $PLUGINSDIR/uires/image/un_progress_bg.png
    .png 101KB
  • $PLUGINSDIR/uires/rtf/agreement.rtf
    .rtf 117KB
  • $PLUGINSDIR/uires/uires.idx
    2KB
  • $PLUGINSDIR/uires/values/skin.xml
    2KB
  • $PLUGINSDIR/uires/values/skin.xml.bak
    2KB
  • $PLUGINSDIR/uires/values/skinP0Tplayer.xml
    2KB
  • $PLUGINSDIR/uires/values/skinpot.xml
    2KB
  • $PLUGINSDIR/uires/values/string.xml
    214B
  • $PLUGINSDIR/uires/values/stringP0Tplayer.xml
    241B
  • $PLUGINSDIR/uires/values/stringchina - 副本.xml
    232B
  • $PLUGINSDIR/uires/values/stringchina.xml
    232B
  • $PLUGINSDIR/uires/values/stringchina.xml.bak
    241B
  • $PLUGINSDIR/uires/values/stringlx.xml
    249B
  • $PLUGINSDIR/uires/values/stringlx.xml.bak
    240B
  • $PLUGINSDIR/uires/values/stringoversea.xml
    268B
  • $PLUGINSDIR/uires/values/stringpot.xml
    223B
  • $PLUGINSDIR/uires/values/stringqh360.xml
    241B
  • $PLUGINSDIR/uires/values/style.xml
    1KB
  • $PLUGINSDIR/uires/values/style.xml.bak
    1KB
  • $PLUGINSDIR/uires/values/styleP0Tplayer.xml
    1KB
  • $PLUGINSDIR/uires/values/stylechina.xml
    1KB
  • $PLUGINSDIR/uires/values/stylelx.xml
    1KB
  • $PLUGINSDIR/uires/values/stylepot.xml
    1KB
  • $PLUGINSDIR/uires/values/styleqh360.xml
    1KB
  • $PLUGINSDIR/uires/values/styleqhlx.xml
    1KB
  • $PLUGINSDIR/uires/values/styleqhoversea.xml
    1KB
  • $PLUGINSDIR/uires/xml/dlg_main.xml
    1KB
  • $PLUGINSDIR/uires/xml/dlg_tip.xml
    2KB
  • $PLUGINSDIR/uires/xml/dlg_tip.xml.bak
    2KB
  • $PLUGINSDIR/uires/xml/init.xml
    581B
  • $PLUGINSDIR/uires/xml/page_agreement.xml
    .xml 958B
  • $PLUGINSDIR/uires/xml/page_agreement.xml.bak
    .xml 958B
  • $PLUGINSDIR/uires/xml/page_choose.xml
    2KB
  • $PLUGINSDIR/uires/xml/page_choose.xml.bak
    2KB
  • $PLUGINSDIR/uires/xml/page_finish.xml
    675B
  • $PLUGINSDIR/uires/xml/page_installing.xml
    1KB
  • $PLUGINSDIR/uires/xml/page_installing.xml.bak
    2KB
  • $PLUGINSDIR/uires/xml/page_unstalling.xml
    487B
  • $PLUGINSDIR/uires/xml/page_welcome.xml
    1KB
  • config.ini
    94B
  • uninstx.exe
    .exe 2.0MB
  • .data
    1KB
  • .rdata
    5KB
  • .rsrc/1033/DIALOG/105
    514B
  • .rsrc/1033/DIALOG/106
    248B
  • .rsrc/1033/DIALOG/111
    238B
  • .rsrc/1033/GROUP_ICON/103
    202B
  • .rsrc/1033/ICON/1.ico
    142KB
  • .rsrc/1033/ICON/10.ico
    6KB
  • .rsrc/1033/ICON/11.ico
    4KB
  • .rsrc/1033/ICON/12.ico
    2KB
  • .rsrc/1033/ICON/13.ico
    1KB
  • .rsrc/1033/ICON/14.ico
    1KB
  • .rsrc/1033/ICON/2.ico
    66KB
  • .rsrc/1033/ICON/3.ico
    42KB
  • .rsrc/1033/ICON/4.ico
    37KB
  • .rsrc/1033/ICON/5.ico
    25KB
  • .rsrc/1033/ICON/6.ico
    21KB
  • .rsrc/1033/ICON/7.ico
    16KB
  • .rsrc/1033/ICON/8.ico
    14KB
  • .rsrc/1033/ICON/9.ico
    9KB
  • .rsrc/1033/MANIFEST/1
    1KB
  • .rsrc/2052/version.txt
    1KB
  • .rsrc_1
    168B
  • .text
    25KB
  • [0]
    1.6MB

7299e457e752f8fa4e7eb9e921c2a38f3dd634306f58730cc6aeb929c7fe858a

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 7299e457e752f8fa4e7eb9e921c2a38f3dd634306f58730cc6aeb929c7fe858a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
f5:04:44:29:ae:dc:a6:7b:6d:60:c4:f0:bd:a7:47:08:19:4a:17:af:a8:ce:d4:d4:fb:9a:01:3c:d8:6c:b7:34
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
4
Entry point
13596
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths