General

  • Target

    vcredist_x64_2012.exe

  • Size

    5.8MB

  • MD5

    c8995777e40e3b6cf1d68593ef8f0e08

  • SHA1

    28806c9fb583dd99dee353377c02ae411e21455f

  • SHA256

    54d4c16ce6d312883b41e7b968b8cc85e0d6dd12fd2b80ca0189c1a7c2d30f6a

  • SHA512

    9f1ff96520ba5cf63d0450fa704c94c9d806399c5a4b36caea6e18d2496fb4b4cc433ba3c6b030f0c52b17e30e5689d71ae94e7f66fd79a4e4fe01cd375c4884

  • SSDEEP

    98304:pdmzt5Fy61M2GH71k/W7bdsEx+m40akh4bdod8byVoPev/v9zTJZ4jdi/5gBEPgd:pMp5FyqGH71D9t34bdoaOCPeVkjd+5VA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • vcredist_x64_2012.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110.dll
    .dll windows:6 windows x86 arch:x86

    48666e63d140a96ddbae8e48752607bf


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110chs.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110cht.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110deu.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110enu.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110esn.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110fra.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110ita.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110jpn.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110kor.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110rus.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110u.dll
    .dll windows:6 windows x86 arch:x86

    dbc5fd773616e397fab9dcb66b2c8884


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfcm110.dll
    .dll windows:6 windows x86 arch:x86

    1f20861189938abcaa4ac2debe4e49d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfcm110u.dll
    .dll windows:6 windows x86 arch:x86

    81da3c4f1f8994bbf48ae6ecca248de5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/vcamp110.dll
    .dll windows:6 windows x86 arch:x86

    0dbf31b1c60801889e032e95ad525d6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/vcomp110.dll
    .dll windows:6 windows x86 arch:x86

    d15a7e566b2a434a86f8370e3286e09b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/vc_runtimeAdditional_x86.msi
    .msi
  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/atl110.dll
    .dll windows:6 windows x86 arch:x86

    e4a6b094cdcc4132831ddfe978d2211d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/vccorlib110.dll
    .dll windows:6 windows x86 arch:x86

    b942c533d7091ee15c10dddd2e641592


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/vc_runtimeMinimum_x86.msi
    .msi
  • $TEMP/VCRedist/VCRedist_x86/MVC+2012/11.0.61030.0/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110.dll
    .dll windows:6 windows x64 arch:x64

    2ce7f9683da30f0154c81c1cbe934b38


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110chs.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110cht.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110deu.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110enu.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110esn.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110fra.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110ita.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110jpn.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110kor.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110rus.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfc110u.dll
    .dll windows:6 windows x64 arch:x64

    1f422adcae32e0a196e875b6784e0617


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfcm110.dll
    .dll windows:6 windows x64 arch:x64

    0c73324affa47a38ba00652bbff02eb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/mfcm110u.dll
    .dll windows:6 windows x64 arch:x64

    d8c4e511bf6d5e5b449466eadc864965


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/vcamp110.dll
    .dll windows:6 windows x64 arch:x64

    41b5173b93a26d0c0ff75668e0a20e71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/Win/System64/vcomp110.dll
    .dll windows:6 windows x64 arch:x64

    28a10866a1268b2e8eddc8b656769c45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Additional/vc_runtimeAdditional_x64.msi
    .msi
  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Minimum/Win/System64/atl110.dll
    .dll windows:6 windows x64 arch:x64

    8ca7aed35b720aac9ec88ed55bad59b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Minimum/Win/System64/msvcp110.dll
    .dll windows:6 windows x64 arch:x64

    ac5237467f598a9a5b370a14eccc4dc8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Minimum/Win/System64/msvcr110.dll
    .dll windows:6 windows x64 arch:x64

    2d8550b19d324144e95b49aae32a0dca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Minimum/Win/System64/vccorlib110.dll
    .dll windows:6 windows x64 arch:x64

    26901e30c69f9783330d2859d883c1cc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/Minimum/vc_runtimeMinimum_x64.msi
    .msi
  • $TEMP/VCRedist/x64/VCRedist_x64/MVC+2012/11.0.61030.0/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110.dll
    .dll windows:6 windows x86 arch:x86

    48666e63d140a96ddbae8e48752607bf


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110chs.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110cht.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110deu.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110enu.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110esn.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110fra.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110ita.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110jpn.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110kor.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110rus.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfc110u.dll
    .dll windows:6 windows x86 arch:x86

    dbc5fd773616e397fab9dcb66b2c8884


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfcm110.dll
    .dll windows:6 windows x86 arch:x86

    1f20861189938abcaa4ac2debe4e49d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/mfcm110u.dll
    .dll windows:6 windows x86 arch:x86

    81da3c4f1f8994bbf48ae6ecca248de5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/vcamp110.dll
    .dll windows:6 windows x86 arch:x86

    0dbf31b1c60801889e032e95ad525d6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/Win/System/vcomp110.dll
    .dll windows:6 windows x86 arch:x86

    d15a7e566b2a434a86f8370e3286e09b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Additional/vc_runtimeAdditional_x86.msi
    .msi
  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/atl110.dll
    .dll windows:6 windows x86 arch:x86

    e4a6b094cdcc4132831ddfe978d2211d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/Win/System/vccorlib110.dll
    .dll windows:6 windows x86 arch:x86

    b942c533d7091ee15c10dddd2e641592


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/Minimum/vc_runtimeMinimum_x86.msi
    .msi
  • $TEMP/VCRedist/x86/VCRedist_x86/MVC+2012/11.0.61030.0/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections