General

  • Target

    7284297c8011db991a0f66c4d4fd7509

  • Size

    2.7MB

  • MD5

    7284297c8011db991a0f66c4d4fd7509

  • SHA1

    af75f201d65642c4ff75336571fb6258fc98a840

  • SHA256

    1e9c0cdfa75afb645db528c22784ab56f0a640cef9f7cc31d7742c25d498651f

  • SHA512

    b2195c4bb38c59248c8d3cdaf0381b63f98e5e6fdc61be60637120becf8124f68a5863e779faa9f04b4df076bce0d6820b1ae8f1c0cced6897d55020681aff9b

  • SSDEEP

    49152:bHeOeCRdLObiPk5pBND30gBBCCBl6M36T+5kcENoCrgIw3TzCXq1ZjHOSmS3QGA8:zeOe6dLObiPg6gPHBl6Mk+89fwjzCXqx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7284297c8011db991a0f66c4d4fd7509
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CoreAAC.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    603a5553c41f87f262cc1e933305d724


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CoreAVC.ax
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/FWUpnp.dll
    .dll windows:5 windows x86 arch:x86

    0f59a417be517814d6255c7c7ab35c48


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Hookkernel.dll
    .dll windows:4 windows x86 arch:x86

    9db40d556cd2d852ea51672f0ff36a72


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Live.dll
    .dll windows:4 windows x86 arch:x86

    3ec1562ecdfd7b5d4e954855b4d24533


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    77e580ab607c48dfa294a5b7ae2f07dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:4 windows x86 arch:x86

    8b09590074c9596dc529d255269e0815


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPHookShell.dll
    .dll windows:4 windows x86 arch:x86

    f61b7d78068048549d605134de104dc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Send_Log_Kernel_Module.dll
    .dll windows:4 windows x86 arch:x86

    43e12366080d2670a77e2262b7a2a482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TipsClient.dll
    .dll windows:4 windows x86 arch:x86

    06ad09e6be2147029215bcc7830d3de7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VAProxyD.dll
    .dll windows:4 windows x86 arch:x86

    c3502aeb4d5cff18ed59ececfbd2c70f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4d55505fec9adbcb0729d379175c53d4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/audioswitcher.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    44d6c239fec5f9a713dd7e36b1afeee9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    4c58834f40af689f9a014f980c90715f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/mir.dll
    .dll windows:4 windows x86 arch:x86

    1bb9ac75bcddcad19ef884bc3d73f3fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/peer.dll
    .dll windows:4 windows x86 arch:x86

    5f401939efae749f108e5b0d37124a65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/sop.dll
    .dll windows:4 windows x86 arch:x86

    602b9c17818d3d0c13020d86bc7311c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/tpi.dll
    .dll windows:4 windows x86 arch:x86

    90547e4eb5ec31263ac362ca3152bc21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b21dc5aac1fb39dced130358580e621


    Code Sign

    Headers

    Imports

    Exports

    Sections