General

  • Target

    641563c1667851ff6075c34741dd91fc08f0bee69df47eba661b7373d808673f

  • Size

    4.9MB

  • MD5

    cda8b29d143b28facfdf8766ea339023

  • SHA1

    b5e84897ce499f3cecb1605e28288a9284c81e5e

  • SHA256

    641563c1667851ff6075c34741dd91fc08f0bee69df47eba661b7373d808673f

  • SHA512

    5ce570ea3e1413cccd1d19d6d946dcb12232b5d7d5150cbbc9d15ddabbd360512f330ae30c32d6893a114f12f0adfc5f3a8224e69ffd8b1bbb4a5f2d30ba1d46

  • SSDEEP

    98304:5TM7VaAQQ8mpYC2t9ExFLQ1BRp0/h6Y5FiIv1LgBDRjjtEcc31jbchK4uMa3Y2Ye:BMkAQqewxxQ1p0p6EiIv1UhRjjtEF3tD

Score
1/10

Malware Config

Signatures

  • NSIS installer 2 IoCs

Files

  • 641563c1667851ff6075c34741dd91fc08f0bee69df47eba661b7373d808673f
    .rar
  • App/Uninstall Tool/License.dat
  • App/Uninstall Tool/RemoveService.cmd
  • App/Uninstall Tool/StartUninstallTool.bat
  • App/Uninstall Tool/UninstallTool.exe
    .exe windows x86

    c42b0c1f41e0605c4616086c8aef5ed6


    Code Sign

    Headers

    Imports

    Sections

  • App/Uninstall Tool/UninstallToolHelper.exe
    .exe windows x86

    f0e8305f3a2a23ba622fa7f18bf7cd51


    Code Sign

    Headers

    Imports

    Sections

  • App/Uninstall Tool/UninstallToolPortable.exe
    .exe windows x86

    134015f954eea11f9de4bd20a6334c02


    Code Sign

    Headers

    Imports

    Sections

  • App/Uninstall Tool/UninstallTool_x64.dat
    .exe windows x64

    610106b1f1cbe4c1e134a0dabf62c6b0


    Headers

    Imports

    Sections

  • App/Uninstall Tool/UninstallTool_x86.dat
    .exe windows x86

    5a03fe165c324ecb61f6b4e4065df3ee


    Headers

    Imports

    Exports

    Sections

  • App/Uninstall Tool/languages/Arabic.xml
  • App/Uninstall Tool/languages/Armenian.xml
  • App/Uninstall Tool/languages/Azerbaijani.xml
  • App/Uninstall Tool/languages/Belarusian.xml
  • App/Uninstall Tool/languages/Bulgarian.xml
  • App/Uninstall Tool/languages/Chinese_Simplified.xml
  • App/Uninstall Tool/languages/Chinese_Traditional.xml
  • App/Uninstall Tool/languages/Croatian.xml
  • App/Uninstall Tool/languages/Czech.xml
  • App/Uninstall Tool/languages/Danish.xml
  • App/Uninstall Tool/languages/Dutch.xml
  • App/Uninstall Tool/languages/English.xml
  • App/Uninstall Tool/languages/Estonian.xml
  • App/Uninstall Tool/languages/French.xml
  • App/Uninstall Tool/languages/Georgian.xml
  • App/Uninstall Tool/languages/German.xml
  • App/Uninstall Tool/languages/Greek.xml
  • App/Uninstall Tool/languages/Hebrew.xml
  • App/Uninstall Tool/languages/Hindi.xml
  • App/Uninstall Tool/languages/Hungarian.xml
  • App/Uninstall Tool/languages/Indonesian.xml
  • App/Uninstall Tool/languages/Italian.xml
  • App/Uninstall Tool/languages/Japanese.xml
  • App/Uninstall Tool/languages/Korean.xml
  • App/Uninstall Tool/languages/Latvian.xml
  • App/Uninstall Tool/languages/Lithuanian.xml
  • App/Uninstall Tool/languages/Norwegian.xml
  • App/Uninstall Tool/languages/Persian.xml
  • App/Uninstall Tool/languages/Polish.xml
  • App/Uninstall Tool/languages/Portuguese.xml
  • App/Uninstall Tool/languages/Portuguese_Brazilian.xml
  • App/Uninstall Tool/languages/Romanian.xml
  • App/Uninstall Tool/languages/Russian.xml
  • App/Uninstall Tool/languages/Serbian_Cyrillic.xml
  • App/Uninstall Tool/languages/Serbian_Latin.xml
  • App/Uninstall Tool/languages/Slovak.xml
  • App/Uninstall Tool/languages/Spanish.xml
  • App/Uninstall Tool/languages/Swedish.xml
  • App/Uninstall Tool/languages/Turkish.xml
  • App/Uninstall Tool/languages/Ukrainian.xml
  • App/Uninstall Tool/languages/Vietnamese.xml
  • App/Uninstall Tool/preferences.xml
    .xml
  • App/Uninstall Tool/x64/CisUtMonitor.inf
  • App/Uninstall Tool/x64/CisUtMonitor.sys
    .exe windows x64

    f43b6ef93625d306e6fdaf0ae00f11b3


    Code Sign

    Headers

    Imports

    Sections

  • App/Uninstall Tool/x64/UninstallTool.cpl
    .dll windows x64

    62ae6461ef7d020b0975a60be50736ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/Uninstall Tool/x64/utshellext.dll
    .dll regsvr32 windows x64

    7cced0836fe1b3cc2bcc3d270fc42d45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/Uninstall Tool/x64/utshellext_x86.dll
    .dll regsvr32 windows x86

    45d4942359c6e7f78943a6aeb4fb6969


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/Uninstall Tool/x86/CisUtMonitor.inf
  • App/Uninstall Tool/x86/CisUtMonitor.sys
    .exe windows x86

    76aba047f0b037cb0deb0211092d4824


    Code Sign

    Headers

    Imports

    Sections

  • App/Uninstall Tool/x86/UninstallTool.cpl
    .dll windows x86

    a0280ce257283b5c4ab3412557fcc523


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/Uninstall Tool/x86/utshellext.dll
    .dll regsvr32 windows x86

    45d4942359c6e7f78943a6aeb4fb6969


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/UninstallToolPortable.reg
  • UninstallToolPortable.exe
    .exe windows x86

    59a4a44a250c4cf4f2d9de2b3fe5d95f


    Headers

    Imports

    Sections

  • UninstallToolPortable.ini