General

  • Target

    twinsplaySetup.exe

  • Size

    19.9MB

  • MD5

    114167d01665a33f3120a2218a9208b6

  • SHA1

    1b0b0770b73f0ca0a1edc426a26f882fd8aa877f

  • SHA256

    773bd01bd990790cb70cb02e3c1dce11ae98dd2b0783a5d990803e42ab770f2d

  • SHA512

    fef4372d3efff27764b2571b9b36be648badbcd21a093f0315693cff58389d1f44935b336914f4d2a879bb9077376f12d2e82fcaaa43de0ab61a5802d733e076

  • SSDEEP

    393216:rT3SuYfw9SEF2qS1yzIvAKMoC+qe/3hbGVmIpWdx5an3mSlppWM9x+09w:vfp52D1O2V3wVm7qXpWqw

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • twinsplaySetup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/twinsplay/config.dat
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT.manifest
  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    f208bb763589133c8ca193ac2a02c8a8


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    5e99a6fdc3ec8c0ecee311498b92a66f


    Headers

    Imports

    Exports

    Sections

  • helper.dat
  • imageformats/Microsoft.VC90.CRT.manifest
  • imageformats/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • imageformats/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    d6d1c40f2eb4c18046f51dbd52c042f9


    Headers

    Imports

    Exports

    Sections

  • imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    ca426dd2974d1d2cf8a20d878191c2d3


    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    e231a079a830217b626aaa9bc4912001


    Headers

    Imports

    Exports

    Sections

  • imageformats/qmng4.dll
    .dll windows:5 windows x86 arch:x86

    d2d1a7dd30100ee7f383edefa295028d


    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg4.dll
    .dll windows:5 windows x86 arch:x86

    6f78572a2d4aa3904c95c7149d2798d3


    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff4.dll
    .dll windows:5 windows x86 arch:x86

    3f08b63936b698f7054636911150a1ac


    Headers

    Imports

    Exports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • res/twinsplay-icon-disabled.ico
  • res/twinsplay-icon-disabled.png
    .png
  • res/twinsplay-icon.ico
  • res/twinsplay-icon.png
    .png
  • res/twinsplay_icon16.ico
  • twinsplay.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • twinsplay_helper.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • uninstall.exe.nsis