General

  • Target

    MEGAsyncSetup.exe

  • Size

    14.3MB

  • MD5

    e15c30451a7cdf9a5a12e43e04bbdbb0

  • SHA1

    d24ed5129890b3e22668609d4590b4d20bda3081

  • SHA256

    0eb6ba91a1615a97769c2df504d702f99d3e99455aa2297444c1f3c4b450e062

  • SHA512

    1b94d4625bf86c2dc662d590a7ed21c1c265c696804e9af2749f837d61bcbb13ef7de18d533ba07098e6466dbcc6e865e72825d1e727d55d547e33b571ae4859

  • SSDEEP

    393216:qPsCwDEXjk8j+xOOt1Flfk29VZxGCDGpdRozKktRa+9A:3Crj6F1k2VZxGKsdRya

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 40 IoCs

    Checks for missing Authenticode signature.

Files

  • MEGAsyncSetup.exe
    .exe windows:4 windows x86 arch:x86

    d4b94e8ee3f620a89d114b9da4b31873


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/CPUFeatures.dll
    .dll windows:5 windows x86 arch:x86

    7d9ed6a9d9f704d7ec777cf163d99578


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:6 windows x86 arch:x86

    da1c78fad6d99b81b6f5a1d376234642


    Headers

    Imports

    Exports

    Sections

  • MEGAsync.exe
    .exe windows:5 windows x86 arch:x86

    208cd5da1abc207376001743350f1d7d


    Code Sign

    Headers

    Imports

    Sections

  • MEGAupdater.exe
    .exe windows:5 windows x86 arch:x86

    6f4c35838cd7d2aaceb61c95b6ead20e


    Code Sign

    Headers

    Imports

    Sections

  • Qt5Concurrent.dll
    .dll windows:6 windows x86 arch:x86

    f23e23470d77c587f4394fc944556ae3


    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x86 arch:x86

    a32ed429d591349db9be5204887223aa


    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    073833cbd6b165d18f5f8c52ad77d4bc


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x86 arch:x86

    e0ee9ffc96ffbc889d8ed1824924001b


    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x86 arch:x86

    fff536e905a750fd749960289066f4b6


    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x86 arch:x86

    ea42f8892fb4065f4c9eb94bd85e1123


    Headers

    Imports

    Exports

    Sections

  • Qt5Xml.dll
    .dll windows:6 windows x86 arch:x86

    0e5c3e35e2d38c4b20dd0404f028b251


    Headers

    Imports

    Exports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • cares.dll
    .dll windows:5 windows x86 arch:x86

    19bdb47a5b283b6050b2d977f5a02436


    Headers

    Imports

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x86 arch:x86

    9c31cf018a51d705b4fd0e596d3ac71d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    99e65b99353dde846a99e9729300def1


    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x86 arch:x86

    8c50902dc5a79c2920c91963b7add2ed


    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x86 arch:x86

    a8817b3098a04301ac75c3b2e8adde75


    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x86 arch:x86

    5c5344cd3e8921449465ca7b92ed6349


    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x86 arch:x86

    f3b157de8ffcd5c88d320f03370d510e


    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x86 arch:x86

    dc1d4375353a932e3652d22b7b03f16c


    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x86 arch:x86

    e72a4b4a37f792a75302d63351891e95


    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x86 arch:x86

    dc2921f29e1a4ed3feaf314c3147fe69


    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x86 arch:x86

    49b7bd447c07cbff97ef32506d4c93ba


    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x86 arch:x86

    c3f8b91d0d32dfd3a8a2436f88e72492


    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:6 windows x86 arch:x86

    e6dbee1ac78fd4d356a35bd04fab6324


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Headers

    Imports

    Exports

    Sections

  • libsodium.dll
    .dll windows:5 windows x86 arch:x86

    5f5de7f05cdcd532dbfdab7572de1aa5


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    7d4a94e128dda6c7a10e11a890bebd9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x86 arch:x86

    65ba5b7a4e3f57b280af790e176dfd65


    Headers

    Imports

    Exports

    Sections

  • qt.conf
  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    4ba304e5831aa50eb10ea4acab5e948c


    Headers

    Imports

    Exports

    Sections

  • ucrtbase.dll
    .dll windows:10 windows x86 arch:x86

    44f906d172b935dea0c5d038c6fa8449


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    d4b94e8ee3f620a89d114b9da4b31873


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • vccorlib140.dll
    .dll windows:6 windows x86 arch:x86

    889c9d23308a50ce1e449e83a72d2424


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b1497ec17e3cfac16846155a7a629324


    Code Sign

    Headers

    Imports

    Exports

    Sections