General

  • Target

    iRemoval PRO Premium Edition 1.2.zip

  • Size

    108.3MB

  • MD5

    ac1e0b30dce21e1582cbbd4e7c50d825

  • SHA1

    8592969e6b32110bf4b29e012670f00dcd18c4aa

  • SHA256

    5de030987721afe39ad69357b071e573d41a0422261d4faa262aff8c4671d7c6

  • SHA512

    cfd0a4c8b6a167397c43062e42a56593bf377cf4b83999d8d0f5af9d27853f8e92a38b12e08b849009982c6c1c016a2b7425467e62b942f0280d7b6fc2829f9f

  • SSDEEP

    3145728:xByNlpDC3HxDlzYb9fUHszZt4oTnV9c1jquO:/MpDC3HxZzO9cH8t4SV98quO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 75 IoCs

    Checks for missing Authenticode signature.

Files

  • iRemoval PRO Premium Edition 1.2.zip
    .zip

    Password: ahh

  • iRemoval PRO.exe
    .exe windows:4 windows x86 arch:x86

    Password: ahh

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • iremovalpro.dll
    .dll windows:6 windows x64 arch:x64

    Password: ahh

    6b3312fdebadd9babd9670085681b553


    Headers

    Imports

    Exports

    Sections

  • ref/devimage/15.0/DeveloperDiskImage.dmg
    .dmg macos

    Password: ahh

  • ref/devimage/15.0/DeveloperDiskImage.dmg.signature
  • ref/devimage/15.2/DeveloperDiskImage.dmg
    .dmg macos

    Password: ahh

  • ref/devimage/15.2/DeveloperDiskImage.dmg.signature
  • ref/devimage/15.4/DeveloperDiskImage.dmg
    .dmg macos

    Password: ahh

  • ref/devimage/15.4/DeveloperDiskImage.dmg.signature
  • ref/devimage/15.6/DeveloperDiskImage.dmg
    .dmg macos

    Password: ahh

  • ref/devimage/15.6/DeveloperDiskImage.dmg.signature
  • ref/devimage/16.0/DeveloperDiskImage.dmg
    .dmg macos

    Password: ahh

  • ref/devimage/16.0/DeveloperDiskImage.dmg.signature
  • ref/devimage/16.2/DeveloperDiskImage.dmg
    .dmg macos

    Password: ahh

  • ref/devimage/16.2/DeveloperDiskImage.dmg.signature
  • ref/devimage/16.4/DeveloperDiskImage.dmg
    .dmg macos
  • ref/devimage/16.4/DeveloperDiskImage.dmg.signature
  • ref/ira1n/bin/libimobiledevice/win-x64/bz2.dll
    .dll windows:6 windows x64 arch:x64

    8f6e778d30fb2de2d295b01e31db1f16


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/getopt.dll
    .dll windows:6 windows x64 arch:x64

    d241e1ebf18aef97a56fa5ddeaf11c4c


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/iconv-2.dll
    .dll windows:6 windows x64 arch:x64

    89ce2873bc82c7cc828878046214b7d4


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/ideviceactivation.dll
    .dll windows:6 windows x64 arch:x64

    6803e60666484b5da1e8760667d32afe


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/idevicediagnostics.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/imobiledevice-net-lighthouse.dll
    .dll windows:6 windows x64 arch:x64

    e533a869d1bcfad4b2b0d69c5d8dfc25


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/imobiledevice.dll
    .dll windows:6 windows x64 arch:x64

    ce81ddd56c2d4f8f9a044c960d4c9204


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    aab72f7869a2e9efd56555fd6d70675b


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    a32a41a64a73ad2a4b2f1b61d8981765


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    89e76a88488aa7140e7c58e8ab442769


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/libusb-1.0.dll
    .dll windows:6 windows x64 arch:x64

    87714bf980c864975d50b7175b7330cc


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/libusb0.dll
    .dll windows:6 windows x64 arch:x64

    9498967164a796b6d530c86ebc2f3628


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/libxml2.dll
    .dll windows:6 windows x64 arch:x64

    0dd118841a2455a82d7738696b96322b


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/lzma.dll
    .dll windows:6 windows x64 arch:x64

    7950f4177951bd0dc1c676a59abbf92a


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/pcre.dll
    .dll windows:6 windows x64 arch:x64

    21a09f854b56bdd5dfb09f8e97b18b39


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/pcreposix.dll
    .dll windows:6 windows x64 arch:x64

    829e50cf9b1abbca7d2d5a9a9a826348


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/plist.dll
    .dll windows:6 windows x64 arch:x64

    cb6e7b4b2164c7e7b37a3be1038cb49d


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/pthreadVC3.dll
    .dll windows:6 windows x64 arch:x64

    10da88cadfe088de04539ca6d6b328c5


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/readline.dll
    .dll windows:6 windows x64 arch:x64

    9d5d299e2acc7584bfe87e19012a8f02


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/usbmuxd.dll
    .dll windows:6 windows x64 arch:x64

    f843e73c87918f71be24742d662683d6


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    f49ac71a58dd00b20fff27fd20515fff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/zip.dll
    .dll windows:6 windows x64 arch:x64

    cd331c54edce863be1cd96a3b1c966e7


    Headers

    Imports

    Exports

    Sections

  • ref/ira1n/bin/libimobiledevice/win-x64/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    3e00cc5294fc2fcbabd14c323443ba4e


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/afcclient.exe
    .exe windows:4 windows x64 arch:x64

    52ea08f214bcef0a16d4c2a922497b8d


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevice_id.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/ideviceactivation.exe
    .exe windows:4 windows x64 arch:x64

    6791c483a9d765361ba09ca6c8e02ec2


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicebackup.exe
    .exe windows:4 windows x64 arch:x64

    35ff15cffae206f9d2cd35962e551b96


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicebackup2.exe
    .exe windows:4 windows x64 arch:x64

    c20084743101ba455e9569280f8ebcd3


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicebtlogger.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicecrashreport.exe
    .exe windows:4 windows x64 arch:x64

    71c18bfbae7640a3a7d559680809d068


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicedate.exe
    .exe windows:4 windows x64 arch:x64

    504cceba095523252a4f30889fd59ec2


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicedebug.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicedebugserverproxy.exe
    .exe windows:4 windows x64 arch:x64

    14f788efbffa86001bb9d86596cac6cb


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicedevmodectl.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicediagnostics.exe
    .exe windows:4 windows x64 arch:x64

    13fc84048d3c596e4a6aa50182c018d0


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/ideviceenterrecovery.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/ideviceimagemounter.exe
    .exe windows:4 windows x64 arch:x64

    7a5c26633cf4d6d3f9b426722822aa1a


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/ideviceinfo.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/ideviceinstaller.exe
    .exe windows:4 windows x64 arch:x64

    ff1fcb1989f68353f9110db540cdbcdc


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicename.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicenotificationproxy.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicepair.exe
    .exe windows:4 windows x64 arch:x64

    9d0e2bb6632ebfcd6acba1d26d3fc3dc


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/ideviceprovision.exe
    .exe windows:4 windows x64 arch:x64

    7a5c26633cf4d6d3f9b426722822aa1a


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicescreenshot.exe
    .exe windows:4 windows x64 arch:x64

    3a98f83cd233d88f370076c351b4fe59


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicesetlocation.exe
    .exe windows:4 windows x64 arch:x64

    54acfd0f809ded71b64665952adbe795


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/idevicesyslog.exe
    .exe windows:4 windows x64 arch:x64

    13964e1c9b0ffdd3e6048981c5f72e6c


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/inetcat.exe
    .exe windows:4 windows x64 arch:x64

    ccb27b1a1727af5dc5bc759c6aa5cf0b


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/iproxy.exe
    .exe windows:4 windows x64 arch:x64

    42d3cbacc5a87e3d76bf8d28c05d4457


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libbrotlicommon.dll
    .dll .js windows:4 windows x64 arch:x64 polyglot

    ccb34e02e5bd568f952db5cabbf3e2a1


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libbrotlidec.dll
    .dll windows:4 windows x64 arch:x64

    646984f614b7145be46e983790f786d5


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libbz2-1.dll
    .dll windows:4 windows x64 arch:x64

    e00b6dcdd5a7b558ff801228a02812f5


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libcrypto-3-x64.dll
    .dll windows:4 windows x64 arch:x64

    3b99f04bd0674774d28ae687b80a0c15


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libcurl-4.dll
    .dll windows:4 windows x64 arch:x64

    a3db6fd5f9777f97cae820e79a9bbd60


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    d1b707499a1dc5e6414f511e64677d6b


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libidn2-0.dll
    .dll windows:4 windows x64 arch:x64

    d187d5f3ca47b018afe2a295b38d0c29


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libimobiledevice-1.0.dll
    .dll windows:4 windows x64 arch:x64

    03d3199ef08c491603ea06c06a782b08


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libimobiledevice-glue-1.0.dll
    .dll windows:4 windows x64 arch:x64

    561887011874162c4c37d869500a4f37


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    b27b9ddbf928ae1646f6329a1abf21fd


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/liblzma-5.dll
    .dll windows:4 windows x64 arch:x64

    c4fa9fed55b29c51d54d156010122223


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libnghttp2-14.dll
    .dll windows:4 windows x64 arch:x64

    9a09c9a4c1223fea8b2228d743f5b631


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libplist++-2.0.dll
    .dll windows:4 windows x64 arch:x64

    d18eab3eaa0141c22fea7b45d5aa495d


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libplist-2.0.dll
    .dll windows:4 windows x64 arch:x64

    8df5fca6558a3d403dda14a99fc3f66a


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libpsl-5.dll
    .dll windows:4 windows x64 arch:x64

    aae0d88f57028091552794a2909d1fe6


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libreadline8.dll
    .dll windows:4 windows x64 arch:x64

    ab555dd1c51208f984250b572e372592


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libssh2-1.dll
    .dll windows:4 windows x64 arch:x64

    05fc69b0b7e8bcb618ae9bc28679bbc1


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libssl-3-x64.dll
    .dll windows:4 windows x64 arch:x64

    ba937578b2cf01205e38f810bbc09c9f


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libtermcap-0.dll
    .dll windows:4 windows x64 arch:x64

    cbf821e3b3e9bfc9f635ac5440325527


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libunistring-5.dll
    .dll windows:4 windows x64 arch:x64

    5df5957a2375fd9826150acae6823c04


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libusbmuxd-2.0.dll
    .dll windows:4 windows x64 arch:x64

    afd2af03f1c6945398ca6b02f16cd7c1


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libxml2-2.dll
    .dll windows:4 windows x64 arch:x64

    cf04cc97ffbc0a54f691f5fd30411a5d


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libzip.dll
    .dll windows:4 windows x64 arch:x64

    f059f7e64623eaa491f1246f6d05c299


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/libzstd.dll
    .dll windows:4 windows x64 arch:x64

    0b4fe40a28e44dc6639c71e7b1f11fc2


    Headers

    Imports

    Exports

    Sections

  • ref/toolkits/plistutil.exe
    .exe windows:4 windows x64 arch:x64

    958a946f369d05414c6bc1a761e3a542


    Headers

    Imports

    Sections

  • ref/toolkits/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    3e00cc5294fc2fcbabd14c323443ba4e


    Headers

    Imports

    Exports

    Sections