General

  • Target
    tmp
  • Size 17.7MB
  • Sample240216-k4mgtaff53
  • SHA256 f23044e2fd0574d7ec3d9e4674f916e0345088fa0d4ba7987d39284e3b858454
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • tmp
    .exe 17.7MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/Help.ico
    185KB
  • $PLUGINSDIR/Setup.ico
    264KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UninstallLaunch.ico
    70KB
  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe 982KB
  • $PLUGINSDIR/ico.ico
    185KB
  • $PLUGINSDIR/modern-install.ico
    264KB
  • $PLUGINSDIR/msvcp100.dll
    .dll 593KB
  • $PLUGINSDIR/msvcr100.dll
    .dll 809KB
  • $PLUGINSDIR/nsDui.dll
    .dll 5.8MB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 313KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/track_Official-ar-mutaz.txt
    43B
  • $PLUGINSDIR/uninstall.exe
    .exe 10.4MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/SelfDel.dll
    .dll 5KB
  • out.upx
    .dll 5KB
  • $PLUGINSDIR/SkinBtn.dll
    .dll 4KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/btn_close.bmp
    19KB
  • $PLUGINSDIR/btn_install.bmp
    134KB
  • $PLUGINSDIR/left_path.bmp
    28KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/un.exe
    .exe 10.8MB
  • $PLUGINSDIR/unbg.bmp
    786KB
  • $PLUGINSDIR/uninstall.ini
    149B

tmp

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 f23044e2fd0574d7ec3d9e4674f916e0345088fa0d4ba7987d39284e3b858454
  • MD5 SHA1 SHA512 SSDEEP
Digest
24:e7:ab:52:d8:8e:3e:1d:0a:ff:66:ec:e0:fb:94:fa:39:5c:51:17:2b:87:3c:3e:a4:75:0f:5a:a2:ae:2c:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=C4175219,CN=iMobie Inc.,O=iMobie Inc.,POSTALCODE=92618,STREET=113 Iron Gate,L=Irvine,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
5
Entry point
13333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths