General

  • Target

    58080db072f8e4c2a16970a16dbf2625

  • Size

    2.3MB

  • MD5

    58080db072f8e4c2a16970a16dbf2625

  • SHA1

    d0ba81eda53d4a1e8d893abe6080e1a27ecea352

  • SHA256

    5f8f3dafac171907f2808d65c1d72a8c29c1eafc8d1b44866de8a82e4c84ba64

  • SHA512

    25dab4f67aea73445d984f00607a13fb96faf65fc5b03b834f162270d11f933a3634a946aad0b367444b9a51a83c7d1e41ef9128766f6fe76a23155ca7e3c5e2

  • SSDEEP

    49152:QHeOHb4CYXEdPp26SbCt6CL97osOZxOncvOPebS97K9pzJr1hrRG:8eOHb4ZE1sZbCtdL97oKQweye9pzJrjw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 58080db072f8e4c2a16970a16dbf2625
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    a6d780066aa41ed5aef943b6057563e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    a7c2770340db65b3dcb79c29aa100aca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPInstallLog.dll
    .dll windows:4 windows x86 arch:x86

    256af4ebe940c94257ae641d926c73e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    bbc42149d4f5bf66ccd7430e6c3cf560


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    84d3fae859555f3fa806d87efe60a956


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    ecf049fd1e443d20553200f13e1deea6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1a4cd97a03147d1e3e766f3602fd630


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/peer.dll
    .dll windows:5 windows x86 arch:x86

    c61c0cd15465d6c46af4bae47f0bddc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2a8bfb8a1144751d8d12e443415e4f1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    46929088280429ac3354990b94720261


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:5 windows x86 arch:x86

    63ffc46e98a761cd967aad54cbb3823e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    ae203af973724c4f20d47874300ff971


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    61981375a0143ab4be30bf9bbb2f8885


    Code Sign

    Headers

    Imports

    Exports

    Sections