General

  • Target

    66294203ec1c43d4172867d70c5b88cd

  • Size

    2.9MB

  • MD5

    66294203ec1c43d4172867d70c5b88cd

  • SHA1

    f7c46dac302bcf0668cf1d0e6443aa612f28cc48

  • SHA256

    e0c875b2cb4762bb16896413eb5635615f7a98d68b3998491a0b4fa8da8f655f

  • SHA512

    b0092a85663cdfd659fbc0d35f72e34fab4907b69cc21a38e22e737d70313d106e9226247e0c52c5dd96b5dfacc9e65513fdd1416ad1c422b3ba03f5787d182d

  • SSDEEP

    49152:0HeOU49i5aiwO7z6Pn+5Fuk9KCQ/weJmnRS8AbM3Q6bnDb6cBxVt6qIhiKztM4ri:IeOU49jI6PO4m9Q/weJmnZkOQ6bnDbJ1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 66294203ec1c43d4172867d70c5b88cd
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Hookkernel.dll
    .dll windows:5 windows x86 arch:x86

    39a0c6105a00746b436b64ffd0d840f1


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    97cd466186ada82f5db40728997a3c96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    a6d780066aa41ed5aef943b6057563e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    a7c2770340db65b3dcb79c29aa100aca


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPHookShell.dll
    .dll windows:5 windows x86 arch:x86

    89f107d056c4c082a3da5d76aa15ed89


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPInstallLog.dll
    .dll windows:4 windows x86 arch:x86

    256af4ebe940c94257ae641d926c73e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    bbc42149d4f5bf66ccd7430e6c3cf560


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    39e4649a28b0278fe059d01d71e5a556


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    84d3fae859555f3fa806d87efe60a956


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    ecf049fd1e443d20553200f13e1deea6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1a4cd97a03147d1e3e766f3602fd630


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/peer.dll
    .dll windows:5 windows x86 arch:x86

    c61c0cd15465d6c46af4bae47f0bddc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2a8bfb8a1144751d8d12e443415e4f1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    46929088280429ac3354990b94720261


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:5 windows x86 arch:x86

    63ffc46e98a761cd967aad54cbb3823e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    ae203af973724c4f20d47874300ff971


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    61981375a0143ab4be30bf9bbb2f8885


    Code Sign

    Headers

    Imports

    Exports

    Sections