General

  • Target

    2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192

  • Size

    37.2MB

  • MD5

    433c402f3e69138156c2414e5bce8e7e

  • SHA1

    2ebed0a3c1ca7e3b2afa8d4237c9fbdab7932317

  • SHA256

    2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192

  • SHA512

    0d7fd487d2ad6ce6276116ebba0aff2c8d0d5e48508bfe498b0ca05bf75db055e71365b044538eac986a7135c141a16928b16bf17348b4bfc05435d4df4afcd0

  • SSDEEP

    393216:/h2pRAr7xamF+OBSUephoHbgdNUvjlXNh4uXzv0mCL/HLCNhlvvy3FLs4XisisYq:kK7Ygsh2bVvjb7vq+NC3FLDiixD

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 2ff2ba5b37acf3f129832c9f1ceacc6c6148ed71726bc4e262d829ee80430192
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb8196bbae3def78ee1944fe9016bdbc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_4_/TeamViewer_.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    ad07268da82afb689855dbfe2dd9f0d2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:5 windows x86 arch:x86

    11eacc375ae34c5bfca099d63719afcd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advanced_unicode.ini
  • $PLUGINSDIR/dialogsEx.dll
    .dll windows:4 windows x86 arch:x86

    557640b8e9154ea0d56b33592889a90f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/finish_unicode.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    7157cbf6b8ac59151804907639aae079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:4 windows x86 arch:x86

    9c8bb65ecbb91da1f2ebb6ae7a714ed0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/start_unicode.ini
  • $PLUGINSDIR/wincheck.ini
  • tvfiles.7z
    .7z
  • CopyrightFULL.txt
  • TeamViewer.exe
    .exe windows:6 windows x64 arch:x64

    da628b3bd886f3ce7f95d8e6f1a4b6cb


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer15.otf
  • TeamViewer_Desktop.exe
    .exe windows:6 windows x64 arch:x64

    2a3778163b3eb33792da4e802555fdd0


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Note.exe
    .exe windows:6 windows x64 arch:x64

    29db323d82768d7e1e3aac30f98ca7d3


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Resource_ar.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_bg.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_cs.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_da.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_de.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_el.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_en.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_es.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_fi.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_fr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_he.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_hr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_hu.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_id.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_it.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ja.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ko.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_lt.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_nl.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_no.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_pl.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_pt.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ro.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ru.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_sk.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_sr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_sv.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_th.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_tr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_uk.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_vi.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_zhCN.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_zhTW.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Service.exe
    .exe windows:6 windows x64 arch:x64

    a389f1316faaf34758113704731030da


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_StaticRes.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • WriteDump.exe
    .exe windows:6 windows x86 arch:x86

    8356d8a38eedf2708ab27978337b26ef


    Code Sign

    Headers

    Imports

    Sections

  • dpa-de.html
    .html
  • dpa-en.html
    .html
  • eula-de.html
    .html
  • eula-en.html
    .html
  • outlook/ManagedAggregator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • outlook/TeamViewerMeetingAddIn.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • outlook/TeamViewerMeetingAddinShim.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    b0b14890f870013b9ab4c17359662fa8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • outlook/TeamViewerMeetingAddinShim64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    b2aa9280dc61d3441f398d87c247bfc9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_w32.dll
    .dll windows:6 windows x86 arch:x86

    ed097d3ad5eaecc5a53512eab8c5598e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_w32.exe
    .exe windows:6 windows x86 arch:x86

    33dffe2db94dfa181ea4b08a87f65099


    Code Sign

    Headers

    Imports

    Sections

  • tv_x64.dll
    .dll windows:6 windows x64 arch:x64

    1474ef113235f7e5d38f46e702fe4d0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_x64.exe
    .exe windows:6 windows x64 arch:x64

    a39a057d82e26fef2f3e143493287e2d


    Code Sign

    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:5 windows x86 arch:x86

    11eacc375ae34c5bfca099d63719afcd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uninstall_unicode.ini
  • tvfiles_printer_WithPDFSupport_x64.7z
    .7z
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
  • Printer/TeamViewer_XPSDriverFilter.gpd
  • Printer/TeamViewer_XPSDriverFilter.inf
  • Printer/teamviewer_xpsdriverfilter.cat
  • Printer/x64/TeamViewer_XPSDriverFilter.dll
    .dll windows:6 windows x64 arch:x64

    618b6ab8f3cd7759b0577feaa0d9b395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tvfiles_printer_WithoutPDFSupport_x64.7z
    .7z
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
  • Printer/TeamViewer_XPSDriverFilter.gpd
  • Printer/TeamViewer_XPSDriverFilter.inf
  • Printer/teamviewer_xpsdriverfilter.cat
  • Printer/x64/TeamViewer_XPSDriverFilter.dll
    .dll windows:6 windows x64 arch:x64

    618b6ab8f3cd7759b0577feaa0d9b395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tvfiles_printer_WithoutPDFSupport_x86.7z
    .7z
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
  • Printer/TeamViewer_XPSDriverFilter.gpd
  • Printer/TeamViewer_XPSDriverFilter.inf
  • Printer/teamviewer_xpsdriverfilter.cat
  • Printer/x86/TeamViewer_XPSDriverFilter.dll
    .dll windows:6 windows x86 arch:x86

    b4c7fd5e0b259aa132a0b210079572a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tvfilesx64.7z
    .7z
  • tvfilesx86.7z
    .7z