General

  • Target

    2f39128c7e841f8dd0cd2bddfa8bc79e.bin

  • Size

    37.3MB

  • MD5

    2f39128c7e841f8dd0cd2bddfa8bc79e

  • SHA1

    7b7e8f2f3f192aaaaa16d88f3500f74f89f0cb32

  • SHA256

    97b0e94bbdc409f3eb09b1017b3b58ccc0eae145a98a3bc6ea651ef1d5bc2d8e

  • SHA512

    290dfb1401d7826f5f392cb974047314704703b5352e30f4004e6b1e20f40f6e3783db40f358576c4b9f3dd309e7c5b8594dce1bc62d5997bdc37e425478ef01

  • SSDEEP

    786432:xOMQW90VxAQmfLG9RhocdgMhOIAz5Sigksru/OF1iMcL/63MxQgkzJ+7uDuyzh6D:6DVWQ9z5dgZNSlzruXTGngkcYC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f39128c7e841f8dd0cd2bddfa8bc79e.bin
    .zip
  • ADTree.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • AxInterop.MSTSCLib.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • AxInterop.WFICALib.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BouncyCastle.Crypto.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CHANGELOG.TXT
  • COPYING.TXT
  • CREDITS.TXT
  • Firefox/AccessibleMarshal.dll
    .dll regsvr32 windows:5 windows x86

    c0d37d0a60e48ccbe975628e9894f53a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/breakpadinjector.dll
    .dll windows:5 windows x86

    161777a9e48a0e46020e6fd68a43ae3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/d3dcompiler_47.dll
    .dll windows:6 windows x86

    f63cad154afed6da772d0ab361f448f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/freebl3.dll
    .dll windows:6 windows x86

    45ad2d7454bfae637db90d12d701e910


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/icudt56.dll
    .dll windows:6 windows x86


    Code Sign

    Headers

    Exports

    Sections

  • Firefox/icuin56.dll
    .dll windows:6 windows x86

    d8ad8feba97b083849cdc8b6fe12d499


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/icuuc56.dll
    .dll windows:6 windows x86

    2d6472ef54222f1533d680830e007545


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/lgpllibs.dll
    .dll windows:5 windows x86

    c42300de04b29a6c7068b94f026dc5a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/libEGL.dll
    .dll windows:5 windows x86

    966b1e95bee3006e9753a580c447dd11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/libGLESv2.dll
    .dll windows:5 windows x86

    7a589e77251ac69d415f345057eac56f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/mozglue.dll
    .dll windows:5 windows x86

    37242d94134134d9bd09c009767d5fd0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/nss3.dll
    .dll windows:5 windows x86

    00d2c3fb9cfa483428022b86b536ff02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/nssckbi.dll
    .dll windows:6 windows x86

    fe83dfa0e25bec15f3f63c10d558fc6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/nssdbm3.dll
    .dll windows:6 windows x86

    8c0312f3a9ceecc0f03ec91e26da9952


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/omni.ja
  • Firefox/plugin-container.exe
    .exe windows:5 windows x86

    22c3cab8143760e4e7c07109c6a001c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/plugin-hang-ui.exe
    .exe windows:5 windows x86

    20420bf8b12d2a88b5e4751ed36e1b46


    Code Sign

    Headers

    Imports

    Sections

  • Firefox/sandboxbroker.dll
    .dll windows:5 windows x86

    0f7a74bb9ce6a7b33f3e299bd77f0b24


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/softokn3.dll
    .dll windows:6 windows x86

    0fc436dfcd04ed79988dbb8d7f1ed6ff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Firefox/xul.dll
    .dll windows:5 windows x86

    f8f45ff189ff914fe30ae4c49ff4ebbe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Geckofx-Core.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Geckofx-Winforms.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Help/CMDSwitches.htm
  • Help/Config.htm
  • Help/Configuration.htm
  • Help/ConfigurationSQL.htm
  • Help/Connection.htm
    .html
  • Help/Connections.htm
  • Help/ErrorsAndInfos.htm
    .html
  • Help/ExternalTools.htm
    .html
  • Help/ImportFromAD.htm
    .html
  • Help/Index.htm
    .html
  • Help/Installation.htm
  • Help/Introduction.htm
  • Help/Main.css
  • Help/MainMenu.htm
  • Help/Options.htm
    .html
  • Help/PortScan.htm
  • Help/Prerequisites.htm
  • Help/QuickConnect.htm
    .html
  • Help/QuickReference.htm
    .html
  • Help/SQLScript.txt
  • Help/SSHFileTransfer.htm
    .html
  • Help/SaveAsExport.htm
    .html
  • Help/ScreenshotManager.htm
    .html
  • Help/Screenshots/Configuration/01.png
    .png
  • Help/Screenshots/Configuration/02.png
    .png
  • Help/Screenshots/Configuration/03.png
    .png
  • Help/Screenshots/Configuration/04.png
    .png
  • Help/Screenshots/Configuration/05.png
    .png
  • Help/Screenshots/Configuration/06.png
    .png
  • Help/Screenshots/Configuration/07.png
    .png
  • Help/Screenshots/Configuration/08.png
    .png
  • Help/Screenshots/Configuration/09.png
    .png
  • Help/Screenshots/Configuration/10.png
    .png
  • Help/Screenshots/Configuration/11.png
    .png
  • Help/Screenshots/Configuration/12.png
    .png
  • Help/Screenshots/Configuration/13.png
    .png
  • Help/Screenshots/Configuration/14.png
    .png
  • Help/Screenshots/Configuration/15.png
    .png
  • Help/Screenshots/Configuration/16.png
    .png
  • Help/Screenshots/Configuration/17.png
    .png
  • Help/Screenshots/External Tools/01.png
    .png
  • Help/Screenshots/External Tools/02.png
    .png
  • Help/Screenshots/External Tools/03.png
    .png
  • Help/Screenshots/External Tools/04.png
    .png
  • Help/Screenshots/External Tools/05.png
    .png
  • Help/Screenshots/External Tools/06.png
    .png
  • Help/Screenshots/External Tools/07.png
    .png
  • Help/Screenshots/External Tools/08.png
    .png
  • Help/Screenshots/Main Menu/File.png
    .png
  • Help/Screenshots/Main Menu/Info.png
    .png
  • Help/Screenshots/Main Menu/QuickConnect.png
    .png
  • Help/Screenshots/Main Menu/Tools.png
    .png
  • Help/Screenshots/Main Menu/View.png
    .png
  • Help/Screenshots/Quick Connect/01.png
    .png
  • Help/Screenshots/Quick Connect/02.png
    .png
  • Help/Screenshots/Quick Connect/03.png
    .png
  • Help/Screenshots/Reference/01.png
    .png
  • Help/Update.htm
    .html
  • Icons/Anti Virus.ico
  • Icons/Backup.ico
  • Icons/Build Server.ico
  • Icons/Database.ico
  • Icons/Domain Controller.ico
  • Icons/ESX.ico
  • Icons/Fax.ico
  • Icons/File Server.ico
  • Icons/Finance.ico
  • Icons/Firewall.ico
  • Icons/Linux.ico
  • Icons/Log.ico
  • Icons/Mail Server.ico
  • Icons/PuTTY.ico
  • Icons/Remote Desktop.ico
  • Icons/Router.ico
  • Icons/SSH.ico
  • Icons/SharePoint.ico
  • Icons/Switch.ico
  • Icons/Tel.ico
  • Icons/Telnet.ico
  • Icons/Terminal Server.ico
  • Icons/Test Server.ico
  • Icons/Virtual Machine.ico
  • Icons/Web Server.ico
  • Icons/WiFi.ico
  • Icons/Windows.ico
  • Icons/Workstation.ico
  • Icons/mRemote.ico
  • Icons/mRemoteNG.ico
  • Interop.MSTSCLib.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Interop.WFICALib.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MagicLibrary.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ObjectListView.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PuTTYNG.exe
    .exe windows:6 windows x86

    f2b227a5a3682cdf0538dbc87f949168


    Headers

    Imports

    Sections

  • Readme.txt
  • Renci.SshNet.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Schemas/mremoteng_confcons_v2_6.xsd
  • Themes/darcula.vstheme
  • Themes/vs2015blue.vstheme
  • Themes/vs2015dark.vstheme
  • Themes/vs2015light.vstheme
  • VncSharp.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WeifenLuo.WinFormsUI.Docking.ThemeVS2003.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WeifenLuo.WinFormsUI.Docking.ThemeVS2012.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WeifenLuo.WinFormsUI.Docking.ThemeVS2013.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WeifenLuo.WinFormsUI.Docking.ThemeVS2015.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WeifenLuo.WinFormsUI.Docking.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • cs-CZ/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • de/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • el/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • en-US/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • es-AR/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • es/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • fr/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • hu/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • it/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ja-JP/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ko-KR/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • log4net.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • mRemoteNG.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • mRemoteNG.exe.config
    .xml
  • nb-NO/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • nl/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • pl/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • pt-BR/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • pt/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ru/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • tr-TR/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • uk/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-CN/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • zh-TW/mRemoteNG.resources.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections