General

  • Target

    tmp

  • Size

    9.5MB

  • MD5

    245d42db1c8baca8521b1d7e5d2a3252

  • SHA1

    f49ea656d41572e76a754b712de2188d28f838e4

  • SHA256

    632e3afccd98120934bce68913c7f8983b79262006325be931ef76fab16225c2

  • SHA512

    ace7ffcee6e96f7491a84d716cc2074befe50e321776936b7d15bb7e1c2264c4f980fa627d98d3345dde5888381b84deeae7788d3057361829cb3b527a9dc286

  • SSDEEP

    196608:OBWBwTry7Zx3cA3RNyBpMs5INN75CQLdU1Xmb+Kazzg:OBWBwHy7Zx1R4gUI37J50XmdazU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CheckProVs.dll
    .dll windows:5 windows x86 arch:x86

    e8d4e166b8d3ddde3fcf32414a378490


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll windows:5 windows x86 arch:x86

    816e178c65c5aa0913ea6ddace6809ac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Help.ico
  • $PLUGINSDIR/Setup.ico
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UninstallLaunch.ico
  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe windows:5 windows x86 arch:x86

    5e3ce2eed99c49477aed11aea6091114


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ico.ico
  • $PLUGINSDIR/modern-install.ico
  • $PLUGINSDIR/msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDui.dll
    .dll windows:6 windows x86 arch:x86

    6d326900ab82ca4bdab7939cc7c2f52a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    a89a235c853214d5f945ce4c2f607130


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    b6854db8fde386e6ef367d623b9e75d8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/track_Official-ar-mutaz.txt
  • $PLUGINSDIR/uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CheckProVs.dll
    .dll windows:5 windows x86 arch:x86

    e8d4e166b8d3ddde3fcf32414a378490


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll windows:6 windows x86 arch:x86

    3a23b4f96014b7e2853e778af0b28427


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/libcrypto-1_1.dll
    .dll windows:6 windows x86 arch:x86

    032d4210457c33a359de5e82029c33fe


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/libssl-1_1.dll
    .dll windows:6 windows x86 arch:x86

    81ef8c6e85c963b099a573ac5ba77e02


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-install.ico
  • $PLUGINSDIR/nsDui.dll
    .dll windows:6 windows x86 arch:x86

    aee31733e36acebc5605a0dcde4d7d48


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections