General

  • Target

    Data1.cab

  • Size

    10.4MB

  • MD5

    a77aaebc658d3ebaf74e4fd412228750

  • SHA1

    eff0c08fc3843804015ee9ca1c2f593e535a08c5

  • SHA256

    08c0df88e40f6fbcd3d62805b9e4b76684579a772cd291b37fa6468a3c706956

  • SHA512

    02cc962d2c28605a2660f870d4b25ef780e214e4200992c86a19805d9af129fd9d667167fb186162d76f395737fcedb5a35f3ed99b267212880f9c538b1bb18d

  • SSDEEP

    196608:dqE2jtY2kWwpuKYeJ9vRN3G5wpXtztfb7BKN7JgKbpIRagN97NseXD:dqE2ju2MuKYerGipXf5emOTefP

Score
N/A

Malware Config

Signatures

Files

  • Data1.cab
    .cab
  • adsync.dll
    .dll windows x86

    54d9615c1d65a3112ff7e95bb6be0c6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • agentintegration.dll
    .dll windows x86

    05209c4cddee710ab5c917677fa543da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • agentkernel.dll
    .dll windows x86

    760e67d652f9d52d768ff79d1194f093


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • agentservices.dll
    .dll windows x86

    6bffe2d6103384e86d17f08db85cd3da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • agentsvc.exe
    .exe windows x86

    2a73c92d78d61d1ce4863059c56935b3


    Code Sign

    Headers

    Imports

    Sections

  • aginstall.exe
    .exe windows x86

    9864ee04e042936bea0b4e933f60e144


    Code Sign

    Headers

    Imports

    Sections

  • anthony_binhex.gif
    .gif
  • anthony_bomb.gif
    .gif
  • anthony_box.gif
    .gif
  • anthony_box2.gif
    .gif
  • anthony_c.gif
    .gif
  • anthony_compressed.gif
    .gif
  • anthony_dir.gif
    .gif
  • anthony_dirup.gif
    .gif
  • anthony_dvi.gif
    .gif
  • anthony_f.gif
    .gif
  • anthony_image.gif
    .gif
  • anthony_image2.gif
    .gif
  • anthony_layout.gif
    .gif
  • anthony_link.gif
    .gif
  • anthony_movie.gif
    .gif
  • anthony_pdf.gif
    .gif
  • anthony_portal.gif
    .gif
  • anthony_ps.gif
    .gif
  • anthony_quill.gif
    .gif
  • anthony_script.gif
    .gif
  • anthony_sound.gif
    .gif
  • anthony_tar.gif
    .gif
  • anthony_tex.gif
    .gif
  • anthony_text.gif
    .gif
  • anthony_unknown.gif
    .gif
  • anthony_xbm.gif
    .gif
  • anthony_xpm.gif
    .gif
  • avdetect.sig
  • cachemgr.cgi
    .exe windows x86

    c982b42941d5c01441b8e6dc4a4ef706


    Headers

    Imports

    Sections

  • cachemgr.conf
  • commswrapper.dll
    .dll windows x86

    3258dfdeb14e82d48b1f53fa1f5fe2fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • compressionservice.dll
    .dll windows x86

    81cde5153ca6d00f499a44768c982283


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • configservice.dll
    .dll windows x86

    4adcc5251ff2ffb0271b58d2301265d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • contributors
  • copying
  • copyright
  • cpprest120_xp_2_9.dll
    .dll windows x86

    1040ea5429e14f8b535105b91b9e576d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • credits
  • deployment.dll
    .dll windows x86

    7fa99c12d2d5314c2dfb1517678d73b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • diagnosis.dll
    .dll windows x86

    d2583c46eddd71393c7f512b2ca9d3b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • digest_edir_auth.exe
    .exe windows x86

    7b2829fcc011fdaf774fc351751e0880


    Code Sign

    Headers

    Imports

    Sections

  • digest_ldap_auth.exe
    .exe windows x86

    d9216e51ce5110bbee60f9db202abef0


    Code Sign

    Headers

    Imports

    Sections

  • digest_pw_auth.exe
    .exe windows x86

    2e71be20430cc60909868fbce2820005


    Code Sign

    Headers

    Imports

    Sections

  • discoverymanager.dll
    .dll windows x86

    3c30cb3079fef4f091471a31356fa8b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • discoveryprobe.dll
    .dll windows x86

    0aa18ec13ed8ae2d3495bd57f4ed3c45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dispatcher.dll
    .dll windows x86

    12f416f72da5b8097a88e7abd9b2d68e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • driveencryption.dll
    .dll windows x86

    810ffbce9669e02d82795261013ba083


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • edl_v10_paho.mqtt.c.txt
  • epl_v20_paho.mqtt.c.txt
  • err_access_denied
    .html
  • err_cache_access_denied
    .html
  • err_cache_mgr_access_denied
    .html
  • err_cannot_forward
    .html
  • err_connect_fail
    .html
  • err_dns_fail
    .html
  • err_forwarding_denied
    .html
  • err_ftp_disabled
    .html
  • err_ftp_failure
    .html
  • err_ftp_forbidden
    .html
  • err_ftp_not_found
    .html
  • err_ftp_put_created
    .html
  • err_ftp_put_error
    .html
  • err_ftp_put_modified
    .html
  • err_ftp_unavailable
    .html
  • err_invalid_req
    .html
  • err_invalid_resp
    .html
  • err_invalid_url
    .html
  • err_lifetime_exp
    .html
  • err_no_relay
    .html
  • err_only_if_cached_miss
    .html
  • err_read_error
    .html
  • err_read_timeout
    .html
  • err_shutting_down
    .html
  • err_socket_failure
    .html
  • err_too_big
    .html
  • err_unsup_req
    .html
  • err_urn_resolve
    .html
  • err_write_error
    .html
  • err_zero_size_object
    .html
  • fakeauth_auth.exe
    .exe windows x86

    de8fa7b7c5f3fa4e3f8743137c7a6a62


    Code Sign

    Headers

    Imports

    Sections

  • featuremanager.dll
    .dll windows x86

    bfa3fabf9aa949eb07b5620595cbe85e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • installerhelper.exe
    .exe windows x86

    8350d70581954b09f6f54a30029ae332


    Code Sign

    Headers

    Imports

    Sections

  • inventory.dll
    .dll windows x86

    6fb2c389382a344cfb4767c032b91efe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • iotclient.dll
    .dll windows x86

    62085aefcadbd7d39af985dd9aff7656


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto_3.dll
    .dll windows x86

    e1b0a8400b1943278c5e514341ff1fa7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl_3.dll
    .dll windows x86

    0077c01b7d30e8193114cd81de652492


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • license_cpprest.txt
  • license_openssl.txt
  • license_paho.mqtt.c.txt
  • logfile_daemon.exe
    .exe windows x86

    258137756bb0944a086b520fa590ebfe


    Code Sign

    Headers

    Imports

    Sections

  • logservice.dll
    .dll windows x86

    fca6742e2089304c77fcfd2f070b6567


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mfc120u.dll
    .dll windows x86

    bf9bb776792ebfae57684ede20e9eee4


    Code Sign

    Headers

    Imports

    Sections

  • mib.txt
  • mime.conf
    .ps1
  • monitor.dll
    .dll windows x86

    8797a8d8aed8dd3181c59dfc7acde83c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mswin_auth.exe
    .exe windows x86

    bccbcb5051327aa4f2df9e0bc7624ed1


    Code Sign

    Headers

    Imports

    Sections

  • mswin_check_ad_group.exe
    .exe windows x86

    77a3da6a7cb9a3e57995153a11fe5246


    Code Sign

    Headers

    Imports

    Sections

  • mswin_check_lm_group.exe
    .exe windows x86

    0562a75f20b4a3ba2f044ef32a2ac3eb


    Code Sign

    Headers

    Imports

    Sections

  • mswin_negotiate_auth.exe
    .exe windows x86

    b591bbf5febb031c3ada209c7ce49621


    Code Sign

    Headers

    Imports

    Sections

  • mswin_ntlm_auth.exe
    .exe windows x86

    620a1a13bb76feeab6bb02429d03dcf1


    Code Sign

    Headers

    Imports

    Sections

  • ncsa_auth.exe
    .exe windows x86

    80f63a961cd9a349fbd35acdca34e91e


    Code Sign

    Headers

    Imports

    Sections

  • ndkconfig.dll
    .dll windows x86

    39c7e9944880feb1e2bb0800cabe9116


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ndkservice.dll
    .dll windows x86

    8abe0a1eb400b305a31e5e477b72c50f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • networkservice.dll
    .dll windows x86

    190818bf12537801a42aa525d2638e66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • paho_mqtt3as.dll
    .dll windows x86

    6a35a51c93665d0ba36f47b71a1eded1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • patchmanagement.dll
    .dll windows x86

    414aed39d339a4397a4607360fcd3a7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pavgenun.exe
    .exe windows x86

    8e16b9b5587d90e6a9afae8a6cb43520


    Code Sign

    Headers

    Imports

    Sections

  • pluginlauncher.exe
    .exe windows x86

    aff82af922674b56781657a7de6170c9


    Code Sign

    Headers

    Imports

    Sections

  • protectionmanager.dll
    .dll windows x86

    243a3d9787808c8e215ffe631b2b68d7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proxy.dll
    .dll windows x86

    d2d55b302b62bf191862fac64555af9a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proxymanager.dll
    .dll windows x86

    427ada5745df75793944800b1cadd9af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proxyservice.dll
    .dll windows x86

    2b6a98a8690b31809184c97a7869db7a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • psinfo.exe
    .exe windows x86

    7a1cac38fb9722fb14a593bbb06b93be


    Code Sign

    Headers

    Imports

    Sections

  • pssdet.dll
    .dll windows x86

    718e7d2be96ea5cae515296a47f10cd5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • putczip.dll
    .dll windows x86

    765ff9209481c61896ea08a60b46b8c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • puturar.dll
    .dll windows x86

    62aec4b74b9b15c7ee5e8a50847488e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • putuzip.dll
    .dll windows x86

    c876c889d8ac7932e312dd594f8279ab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • realtime.dll
    .dll windows x86

    a6b070cc353f5dd95ddb60d188192920


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • register.dll
    .dll windows x86

    723dc5083652af368934796ce933f54b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remotecontrol.dll
    .dll windows x86

    1d669bf21041f18a3ef435889818344e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • remotecontrolservice.dll
    .dll windows x86

    e1a8f6119d9ff3c552573ff944fb15b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • repository.dll
    .dll windows x86

    9e23afc54b437c2b099f2cf46d1bde82


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rinstall.exe
    .exe windows x86

    3e92bc45a417372f62d7ebb7b43da117


    Code Sign

    Headers

    Imports

    Sections

  • scheduler.dll
    .dll windows x86

    7249e38aa4a80bfb2ddde4c37507ba2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • security.dll
    .dll windows x86

    d837759a9caba6ca4ea9438ab23106ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sgnchk.dll
    .dll windows x86

    89a6d69512ddd5caf6edc165bcb08fbf


    Code Sign

    Headers

    Imports

    Sections

  • sites.whitelist.txt
  • sponsors
  • squid.conf
  • squid.exe
    .exe windows x86

    80bb7f76b03bedcbbaa9a06ad6c286db


    Code Sign

    Headers

    Imports

    Sections

  • squid_ldap_auth.exe
    .exe windows x86

    04b1d9c07c81e2b3c156a392f3b6210d


    Code Sign

    Headers

    Imports

    Sections

  • squid_ldap_group.exe
    .exe windows x86

    990e5ec525a906f2679c435a6c0967f3


    Code Sign

    Headers

    Imports

    Sections

  • squid_radius_auth.conf
  • squid_radius_auth.exe
    .exe windows x86

    91fa78327ecce7a384837ba740c3e367


    Code Sign

    Headers

    Imports

    Sections

  • squid_session.exe
    .exe windows x86

    c23d96a66f3ed76b870565b4788b7c70


    Code Sign

    Headers

    Imports

    Sections

  • squidclient.exe
    .exe windows x86

    9bfaeae6d6ed1466082fb2356cd3e6c3


    Code Sign

    Headers

    Imports

    Sections

  • systeminfoservice.dll
    .dll windows x86

    5d08fdd8405cd990f2d4b625818829e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • telemetry.dll
    .dll windows x86

    c8ebdc20660fcfbef3e5203cd25adbc0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • unlinkd.exe
    .exe windows x86

    3692b1f3c003dc23f1b5e0b5361a33fd


    Code Sign

    Headers

    Imports

    Sections

  • userinteraction.exe
    .exe windows x86

    ffe2e7d9d974617e1637c1a2c73d8e80


    Code Sign

    Headers

    Imports

    Sections

  • userinterfaces.dll
    .dll windows x86

    06615f3b228b2b9ff2404839c223cd4f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vpnenforcement.dll
    .dll windows x86

    40c3621aae3a78e05df6ef9b3ec9823e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workitems.dll
    .dll windows x86

    cc28319ad1980f131b59c21c6c7922d3


    Code Sign

    Headers

    Imports

    Exports

    Sections