General

  • Target
    DroidCam.Setup.6.5.2.exe
  • Size 15.6MB
  • Sample240220-vyv7wacf88
  • SHA256 f92ad1e92780a039397fd62d04affe97f1a65d04e7a41c9b5da6dd3fd265967e
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • DroidCam.Setup.6.5.2.exe
    .exe 15.6MB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • DroidCamApp.exe
    .exe 942KB
  • Licence.txt
    701B
  • adb/AdbWinApi.dll
    .dll 95KB
  • adb/AdbWinUsbApi.dll
    .dll 61KB
  • adb/adb.exe
    .exe 4.5MB
  • lib/DroidCamFilter32.ax
    .dll 84KB
  • lib/insdrv.exe
    .exe 12KB
  • plist.dll
    .dll 53KB
  • usbmuxd.dll
    .dll 31KB
  • vc_redist.x86.exe
    .exe 13.1MB

DroidCam.Setup.6.5.2.exe

  • IMPHASH 3abe302b6d9a1256e6a915429af4ffd2
  • SHA256 f92ad1e92780a039397fd62d04affe97f1a65d04e7a41c9b5da6dd3fd265967e
  • MD5 SHA1 SHA512 SSDEEP
Digest
38:d0:9a:78:95:f0:85:33:71:2b:1e:7f:73:da:eb:7a:70:e7:64:e5:ae:f4:e1:ae:64:9d:1a:b5:06:f0:24:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=BC1136799,CN=DEV47 APPS LTD.,O=DEV47 APPS LTD.,L=Vancouver,ST=British Columbia,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13104272697469736820436f6c756d626961,1.3.6.1.4.1.311.60.2.1.3=#13024341
Minor OS version
0
Major OS version
4
Entry point
12731
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths