Resubmissions

13/02/2024, 10:07

240213-l5na6sfb7x 8

13/02/2024, 10:00

240213-l1v58afa61 8

General

  • Target

    Helper.exe

  • Size

    14.6MB

  • MD5

    bf2eae7caf9b1974dfdb3e0650a5c2d4

  • SHA1

    e404b90f48cf9420342d517347b04cb789346e38

  • SHA256

    3deaa6334651dad91c2b0587cc097e9532904e4f6aabf06a8a0518ac41f3a2a1

  • SHA512

    ad4e5d011ac28e8330686cbacf1c33ab9260ff2c9ce41d91c04e77c94444eda36ebb080304734e21a9e8d7af453fe21db99b3f26dd2928410972f7b4759c50a2

  • SSDEEP

    393216:MCkNRQDn2q+/FhOGyXRNzq+3rdHmqo08YGicez6nlug:MCUwnoYNHBHmqo08YJz6nlT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Helper.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Headers

    Imports

    Sections

  • packages/AAM/IPC/IPC.pima
    .zip
  • AdobeIPCBroker.exe
    .exe windows:6 windows x86 arch:x86

    b78757e60c78fbd8d0549e7a1e0d29a1


    Code Sign

    Headers

    Imports

    Sections

  • customhook/AdobeIPCBrokerCustomHook.exe
    .exe windows:6 windows x86 arch:x86

    85aa1a3ec9a324deb93be1db280c6b57


    Code Sign

    Headers

    Imports

    Sections

  • packages/AAM/IPC/IPC.pimx
  • packages/AAM/IPC/IPC.sig
    .xml
  • packages/ADC/Core/Core.pima
    .zip
  • placeholder.txt
  • packages/ADC/Core/Core.pimx
    .xml
  • packages/ADC/Core/Core.sig
    .xml
  • packages/ADC/HDBox/HDBox.pima
    .zip
  • Adobe Update Helper.exe
    .exe windows:5 windows x86 arch:x86

    725e38d4598d66912b71e930ae1b0342


    Code Sign

    Headers

    Imports

    Sections

  • CRClient.dll
    .dll windows:6 windows x86 arch:x86

    e85acdc65f4a1f62f6ed3dfa469bd2cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CRLogTransport.exe
    .exe windows:6 windows x86 arch:x86

    f65b2f7bb965e14812041bb29c26c996


    Code Sign

    Headers

    Imports

    Sections

  • CRWindowsClientService.exe
    .exe windows:6 windows x86 arch:x86

    69dee0d8a8373479e85bb26fb3c65944


    Code Sign

    Headers

    Imports

    Sections

  • HDHelper.exe
    .exe windows:5 windows x86 arch:x86

    82a2d44124f64fef31cc8e1daa6c7ece


    Code Sign

    Headers

    Imports

    Sections

  • HDIM.dll
    .dll windows:5 windows x86 arch:x86

    5ad8081d7f1a9799498c3b8452215791


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HDNative.dll
    .dll windows:5 windows x86 arch:x86

    584a52729b2707f2bf3e2676fc63f445


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HDPIM.dll
    .dll windows:5 windows x86 arch:x86

    325f386c0b7d0ebf5b83980c304c3e51


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HDUWP.dll
    .dll windows:5 windows x86 arch:x86

    3a47b6ad9f12d5e5e7a2b2c62d7d90f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HDZIP.dll
    .dll windows:5 windows x86 arch:x86

    b1515195b219e3a91fd82844e2d018e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HUM.dll
    .dll windows:5 windows x86 arch:x86

    5827cc42e3f282ca493ab6907f31b2dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Set-up.exe
    .exe windows:5 windows x86 arch:x86

    1ec5f8e7ee2e86fad5c5364ac8fac8c6


    Code Sign

    Headers

    Imports

    Sections

  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    4ea65e918c27e4db6ca317fd81f8736c


    Code Sign

    Headers

    Imports

    Sections

  • TokenResolverx64.exe
    .exe windows:6 windows x64 arch:x64

    b2250ce46eb3995753152fb2ff47dbad


    Code Sign

    Headers

    Imports

    Sections

  • Uninstaller.exe
    .exe windows:5 windows x86 arch:x86

    12f725025084aea26b04fe7baca4f7e2


    Code Sign

    Headers

    Imports

    Sections

  • cr_win_client_config.cfg
  • customhook/HDCoreCustomHook.exe
    .exe windows:5 windows x86 arch:x86

    d5610168be86662daf8fe8b34af20c20


    Code Sign

    Headers

    Imports

    Sections

  • packages/ADC/HDBox/HDBox.pimx
    .xml
  • packages/ADC/HDBox/HDBox.sig
    .xml
  • packages/ADC/IPCBox/IPCBox.pima
    .zip
  • AdobeIPCBroker.exe
    .exe windows:6 windows x86 arch:x86

    5b6f58ae57e4aefc02da53e9f79595c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CRClient.dll
    .dll windows:6 windows x86 arch:x86

    b9bd38ede3ed98b9ff2e81cae42eba02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CRLogTransport.exe
    .exe windows:6 windows x86 arch:x86

    70ac13cda5d9728ade81378aec8b09b7


    Code Sign

    Headers

    Imports

    Sections

  • CRWindowsClientService.exe
    .exe windows:6 windows x86 arch:x86

    ec69bd2234ba45760cace382af5fa01e


    Code Sign

    Headers

    Imports

    Sections

  • StartupOptions.xml
    .xml
  • cr_win_client_config.cfg
  • customhook/AdobeIPCBrokerCustomHook.exe
    .exe windows:6 windows x86 arch:x86

    870810ea1d1d996da7743cf438651939


    Code Sign

    Headers

    Imports

    Sections

  • packages/ADC/IPCBox/IPCBox.pimx
    .xml
  • packages/ADC/IPCBox/IPCBox.sig
    .xml
  • packages/ApplicationInfo.xml
    .xml
  • resources/Config.xml
    .xml