General

  • Target

    TeamViewer_Setup_ru-ckq.exe

  • Size

    7.3MB

  • MD5

    14793143f45f4b76498397afbbe48a46

  • SHA1

    1a4ba689985ab03172aa707980257a10aacf2ec7

  • SHA256

    32b25febfc861c300d9999d5981bbd32ced9f898a5ebd13203e26066d68b6550

  • SHA512

    7610cd1bb1b9bf083258a0c325b34d199489ddd072a55636ab28cffd3752182e60685860f5a1ec871dbab482f4e7ce3bd26469e17d50d953eff9833fea93d223

  • SSDEEP

    196608:uEW7FBBh5UY8bT0dO5ldABnrWu7KwMoauJ16CVE:XsBjSjlY7PiSjVE

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

Files

  • TeamViewer_Setup_ru-ckq.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:4 windows x86 arch:x86

    14e0ed23a737a24ab5884c7197f5adf9


    Headers

    Imports

    Exports

    Sections

  • $_1_/TeamViewer_.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    ad07268da82afb689855dbfe2dd9f0d2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Lizenz_TeamViewer_DE_unicode.txt
  • $PLUGINSDIR/Lizenz_TeamViewer_EN_unicode.txt
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:5 windows x86 arch:x86

    b1d9539c7cfd95718179dedb471b482f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:4 windows x86 arch:x86

    14e0ed23a737a24ab5884c7197f5adf9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advanced_unicode.ini
  • $PLUGINSDIR/dialogsEx.dll
    .dll windows:4 windows x86 arch:x86

    557640b8e9154ea0d56b33592889a90f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/environment_unicode.ini
  • $PLUGINSDIR/host_unicode.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/license_unicode.ini
  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    7157cbf6b8ac59151804907639aae079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:4 windows x86 arch:x86

    9c8bb65ecbb91da1f2ebb6ae7a714ed0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/security_unicode.ini
  • $PLUGINSDIR/start_unicode.ini
  • $PLUGINSDIR/vpn_unicode.ini
  • $PLUGINSDIR/wincheck.ini
  • tvfiles.7z
    .7z
  • CopyRights_DE.txt
  • CopyRights_EN.txt
  • Lizenz_TeamViewer_DE_unicode.txt
  • Lizenz_TeamViewer_EN_unicode.txt
  • TeamViewer.exe
    .exe windows:5 windows x86 arch:x86

    0b845311731fa18f4901616105932aff


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer10.otf
  • TeamViewer_Desktop.exe
    .exe windows:5 windows x86 arch:x86

    ca6f052d4a79b18cd6ff6a31030b139d


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Resource_en.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ru.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Service.exe
    .exe windows:5 windows x86 arch:x86

    55116dcb1f52ea8472f0e55a56c4209d


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_StaticRes.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • outlook/ManagedAggregator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • outlook/TeamViewerMeetingAddIn.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • outlook/TeamViewerMeetingAddinShim.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6576ba052598702104533185b18f144f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • outlook/TeamViewerMeetingAddinShim64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    ec247488c863cebb57895436ab269803


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_w32.dll
    .dll windows:5 windows x86 arch:x86

    dc85c437b37935c861af3e5554a4eb80


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_w32.exe
    .exe windows:5 windows x86 arch:x86

    e28a2cb5a0cc9b9f7d18a86e321f5c6e


    Code Sign

    Headers

    Imports

    Sections

  • tv_x64.dll
    .dll windows:5 windows x64 arch:x64

    d876e905ada429863c3d18bc7c192f51


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_x64.exe
    .exe windows:5 windows x64 arch:x64

    ee838f81314c2cf6b852215846ef499b


    Code Sign

    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    d806a080e21508dd768fa70be247d2ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:4 windows x86 arch:x86

    14e0ed23a737a24ab5884c7197f5adf9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewall.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uninstall_unicode.ini
  • tvfilesx64.7z
    .7z
  • x64/TVMonitor.inf
  • x64/TVMonitor.sy_
    .sys windows:6 windows x64 arch:x64

    f24b69173de020aa0ac1739d7b40e04c


    Code Sign

    Headers

    Imports

    Sections

  • x64/TVPSPrint.inf
  • x64/TVPrint.inf
  • x64/TeamViewerVPN.inf
  • x64/Teamviewer_PrintProcessor.dll
    .dll windows:6 windows x64 arch:x64

    9d5c88c29c1ab402b3e46bfd592be885


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/teamviewer.gpd
  • x64/teamviewer.ppd
  • x64/teamviewervpn.cat
  • x64/teamviewervpn.sy_
    .sys windows:6 windows x64 arch:x64

    cd6e6e3dfb3a87a73c76cb5d3cdda140


    Code Sign

    Headers

    Imports

    Sections

  • x64/tvmonitor.cat
  • x64/tvprint.cat
  • x64/tvpsprint.cat
  • tvfilesx86.7z
    .7z
  • w2k/TeamViewerVPN.inf
  • w2k/teamviewervpn.sy_
    .sys windows:5 windows x86 arch:x86

    8ec9ec9840080f4331c34221e283917c


    Code Sign

    Headers

    Imports

    Sections

  • x86/TVMonitor.inf
  • x86/TVMonitor.sy_
    .sys windows:6 windows x86 arch:x86

    bc06eb1dad5e8285411e580cdee99e10


    Code Sign

    Headers

    Imports

    Sections

  • x86/TVPSPrint.inf
  • x86/TVPrint.inf
  • x86/TeamViewerVPN.inf
  • x86/Teamviewer_PrintProcessor.dll
    .dll windows:6 windows x86 arch:x86

    80f0a67352a8694c667e6d5c219098d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x86/teamviewer.gpd
  • x86/teamviewer.ppd
  • x86/teamviewervpn.cat
  • x86/teamviewervpn.sy_
    .sys windows:6 windows x86 arch:x86

    952b9ef5a3d8fb9c2ae05f06bb0e783c


    Headers

    Imports

    Sections

  • x86/tvmonitor.cat
  • x86/tvprint.cat
  • x86/tvpsprint.cat