General

  • Target

    Win10-Widgets.Rainmeter-4.0.exe

  • Size

    2.5MB

  • MD5

    96554672f937d19af6b2f31693f708b1

  • SHA1

    6181d22dfbe8e6771d1a494965e4b1b559b91791

  • SHA256

    8b90523c943efd5ca12d5347b31715388842c8f199d3271b5c0ac1837e61a4ae

  • SHA512

    2985999fa0a6208ac0d11e4a890b73dc6708e51552239eea54193c83d1412818949eb4b8a97fbe4c8d84ade9b7c95cb4b8dd0b29891298669ce565c546f09304

  • SSDEEP

    49152:WsMWZf/UT28r9EZuLZnwMA6r+3TbcL/aNhkmYUhgDL43BdtNZdNPBtHvjOXJx:WsNfQ21cLpwM16jbcLCEmYUhWL4xPNBj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

Files

  • Win10-Widgets.Rainmeter-4.0.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    149adf074d317fbf0d2f17314bd18969


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • Plugins/ActionTimer.dll
    .dll windows:6 windows x86 arch:x86

    4b35db7ad1e27fe88451fa3ebe108d24


    Headers

    Imports

    Exports

    Sections

  • Plugins/AdvancedCPU.dll
    .dll windows:6 windows x86 arch:x86

    c54003a3a8f1c219fd5437937bc7d8fc


    Headers

    Imports

    Exports

    Sections

  • Plugins/AudioLevel.dll
    .dll windows:6 windows x86 arch:x86

    349fa1c3af0f515e16baf19f430b6942


    Headers

    Imports

    Exports

    Sections

  • Plugins/CoreTemp.dll
    .dll windows:6 windows x86 arch:x86

    fba1ad18a8ad0bf6fcc6905fc73df69c


    Headers

    Imports

    Exports

    Sections

  • Plugins/FileView.dll
    .dll windows:6 windows x86 arch:x86

    903762f784a224cefb323a7b533bbc2c


    Headers

    Imports

    Exports

    Sections

  • Plugins/FolderInfo.dll
    .dll windows:6 windows x86 arch:x86

    3aa4991638a21d0b16bb134fde99097d


    Headers

    Imports

    Exports

    Sections

  • Plugins/InputText.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Exports

    Sections

  • Plugins/PerfMon.dll
    .dll windows:6 windows x86 arch:x86

    e71cb605e311343ca3077533cc226a4b


    Headers

    Imports

    Exports

    Sections

  • Plugins/PingPlugin.dll
    .dll windows:6 windows x86 arch:x86

    ca81f0af8a87f6278e5b5e248962e8fd


    Headers

    Imports

    Exports

    Sections

  • Plugins/PowerPlugin.dll
    .dll windows:6 windows x86 arch:x86

    4cc5d89574705d5ced9bbd8c57e860d6


    Headers

    Imports

    Exports

    Sections

  • Plugins/Process.dll
    .dll windows:6 windows x86 arch:x86

    4246ae7e474690af66e52ccc200a2bda


    Headers

    Imports

    Exports

    Sections

  • Plugins/QuotePlugin.dll
    .dll windows:6 windows x86 arch:x86

    a58807641d22598b467a852edc715968


    Headers

    Imports

    Exports

    Sections

  • Plugins/ResMon.dll
    .dll windows:6 windows x86 arch:x86

    b39a0109817f1fe48a65ad1479657d46


    Headers

    Imports

    Exports

    Sections

  • Plugins/RunCommand.dll
    .dll windows:6 windows x86 arch:x86

    c686e5a33532dbe7fae4f0ec3befdb87


    Headers

    Imports

    Exports

    Sections

  • Plugins/SpeedFanPlugin.dll
    .dll windows:6 windows x86 arch:x86

    3a9d258b218f283d8ef506fb26bf75d4


    Headers

    Imports

    Exports

    Sections

  • Plugins/SpotifyPlugin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Exports

    Sections

  • Plugins/SysInfo.dll
    .dll windows:6 windows x86 arch:x86

    0b1a0bcac97fdf50676ab413b03be64a


    Headers

    Imports

    Exports

    Sections

  • Plugins/WifiStatus.dll
    .dll windows:6 windows x86 arch:x86

    93934d819fb05a83311ac41562cd951a


    Headers

    Imports

    Exports

    Sections

  • Plugins/Win7AudioPlugin.dll
    .dll windows:6 windows x86 arch:x86

    35722fee6f98243d7eebc241e4239c01


    Headers

    Imports

    Exports

    Sections

  • Plugins/WindowMessagePlugin.dll
    .dll windows:6 windows x86 arch:x86

    75949c578f27102c580b6903533763c3


    Headers

    Imports

    Exports

    Sections

  • Plugins/iTunesPlugin.dll
    .dll windows:6 windows x86 arch:x86

    3008807c728a9bc3e8367619dabcf2d1


    Headers

    Imports

    Exports

    Sections

  • Rainmeter.dll
    .dll windows:6 windows x86 arch:x86

    b5a65b55f028beedb4d4cbd61989c8be


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Rainmeter.exe
    .exe windows:6 windows x86 arch:x86

    0fbd6d6ea20649c53c0ede205df26e40


    Code Sign

    Headers

    Imports

    Sections

  • Rainmeter.exe.config
    .xml
  • SkinInstaller.exe
    .exe windows:6 windows x86 arch:x86

    d1c635d2dd9d0f09293048819fd6e737


    Code Sign

    Headers

    Imports

    Sections