General

  • Target

    ConnectifyInstaller.exe

  • Size

    10.7MB

  • MD5

    989b701cfd666960d48f9a3019fe1020

  • SHA1

    a9f316dd441f586ce7625136efcb823f0e1dc885

  • SHA256

    0d7350dab6ca9f9a575f53238732bab013aa7912f6f31062ba448e2ef8a42a81

  • SHA512

    203ca93c26c38b4d8b93453f24dc5f68f740bfadd84aa31cb78e1092f049d28daa980bd2222788f0a60848b3c040e9d59e0ffffb2c3c8462b1d39cf4100aa0ac

  • SSDEEP

    196608:jpN8uNvGR2PPBQGD/w4uqY0FCZyoKIJWXiY4Ugk1d7C6Uo26pOziO2jlt:jw5wxJ/wHCboKIJVV4mno2jiht

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • ConnectifyInstaller.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Slides/Slides.dat
  • $PLUGINSDIR/Slides/gdpr2_en.bmp
  • $PLUGINSDIR/Slides/installer1.png
    .png
  • $PLUGINSDIR/Slides/installer1_hr.png
    .png
  • $PLUGINSDIR/Slides/installer2.png
    .png
  • $PLUGINSDIR/Slides/installer2_hr.png
    .png
  • $PLUGINSDIR/Slides/installer3.png
    .png
  • $PLUGINSDIR/Slides/installer3_hr.png
    .png
  • $PLUGINSDIR/Slides/installer4.png
    .png
  • $PLUGINSDIR/Slides/installer4_hr.png
    .png
  • $PLUGINSDIR/Slides/installer5.png
    .png
  • $PLUGINSDIR/Slides/installer5_hr.png
    .png
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/gdpr2_en.bmp
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisSlideshow.dll
    .dll windows:4 windows x86 arch:x86

    8fc94f48a46bd006f33973e3914c7eb1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/Connectify.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/Connectify.exe.config
    .xml
  • $TEMP/Connectify/$_13_/ConnectifyGopher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyGopher.exe.config
  • $TEMP/Connectify/$_13_/ConnectifyNetServices.exe
    .exe windows:6 windows x86 arch:x86

    216004f63bdaf12584f402909f532396


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyPublic.cer
  • $TEMP/Connectify/$_13_/ConnectifyService.exe
    .exe windows:6 windows x86 arch:x86

    abace7b9bbac02134f97ff2d955852f2


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyShutdown.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyStartup.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyStartup.exe.config
  • $TEMP/Connectify/$_13_/ConnectifySupportCenter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifySupportCenter.exe.config
    .xml
  • $TEMP/Connectify/$_13_/Connectifyd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/Connectifyd.exe.config
    .xml
  • $TEMP/Connectify/$_13_/Credits.html
    .html .js polyglot
  • $TEMP/Connectify/$_13_/DriverSwitcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/DriverSwitcher.exe.config
    .xml
  • $TEMP/Connectify/$_13_/EmojiControls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/GetFileVersion.exe
    .exe windows:6 windows x86 arch:x86

    ce61c6d17f67fe52a8ac451f304ef60d


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/GlobalAtomTable.exe
    .exe windows:6 windows x86 arch:x86

    ce5bb7e7911d09eebe6a70513da7e29f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/HardwareHelperLib.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/LibHotspot.dll
    .dll windows:6 windows x86 arch:x86

    cf155d1de00fabef0eb1cbf53e7636e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/Notification.png
    .png
  • $TEMP/Connectify/$_13_/OneAPNative.dll
    .dll windows:6 windows x86 arch:x86

    9110d4c8a42ec575dbfbf2570d500aab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/adhosts.txt
  • $TEMP/Connectify/$_13_/appscreens/activateError.html
    .html .js polyglot
  • $TEMP/Connectify/$_13_/appscreens/connectify.png
    .png
  • $TEMP/Connectify/$_13_/appscreens/style.css
  • $TEMP/Connectify/$_13_/connectify_cli.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/connectify_cli.exe.config
  • $TEMP/Connectify/$_13_/connectifynat.l4c
  • $TEMP/Connectify/$_13_/fonts/OpenSans-Bold.ttf
  • $TEMP/Connectify/$_13_/fonts/OpenSans-Regular.ttf
  • $TEMP/Connectify/$_13_/languages/ar/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/de/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/es/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/fr/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/pt/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/qps-ploc/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/qps-plocm/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/ro/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/ru/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/tr/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/zh-CN/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/log4cplus.dll
    .dll windows:6 windows x86 arch:x86

    3dd3ad3326935063c7ae8a3784b42eab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe.nsis