General

  • Target

    YIIOTHomePCClientIntl_Setup_1.0.0.0_202108241332.exe

  • Size

    43.3MB

  • MD5

    020e81e179fd963dc55b1045cc470361

  • SHA1

    facdbbf94ebf0fea1277b8a67592661d7b876579

  • SHA256

    a26a94e2524e193dcb3ca7580581e1c1e6d4d802ab48c2f15514dfaeee275c75

  • SHA512

    0afdf6ed1c029ed5059f2294867e09b87a01a1d7c5a929220763e328b5e8fc3745e1ec73ec8b3c268ca8dea20180274ce25ef959d56d18af3f52d7203f8d49a1

  • SSDEEP

    786432:Ve2HvAy3x+qdmbism6z9begt/iUP0HnKMNm8ZCdIDB2IT4qT8CL9FgDCm7CdX9+r:VeAoFismabegVibKMwTIDB2OIe0SXEVB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • YIIOTHomePCClientIntl_Setup_1.0.0.0_202108241332.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/YIHomePCClientNSISPlugin.dll
    .dll windows:5 windows x86 arch:x86

    6eef26a37235998d6247defa4c6aa7bf


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/agreement_chn.txt
  • $PLUGINSDIR/agreement_tw.txt
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • AVAPIs.dll
    .dll windows:5 windows x86 arch:x86

    a8023b943cb702a936e0201ed6bacbcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • D3DX9_42.dll
    .dll windows:6 windows x86 arch:x86

    12b2200cb5e3bf090d11cb95972d3afc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IOTCAPIs.dll
    .dll windows:5 windows x86 arch:x86

    3c6c02303407dbfb31661a2b59595382


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPPP_API.dll
    .dll windows:5 windows x86 arch:x86

    47dc97554f55f3f734844d6d4eade205


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    c5f156d056c33464eb23dd13e24291cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    faf6ff9b54da0b90d47f385f6bcf6d82


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    e6f3dce6886d94878a7c40c1c47cf2e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtSql4.dll
    .dll windows:5 windows x86 arch:x86

    cf45f00a30cde19dbb67863bc31b276b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SDL2.dll
    .dll windows:4 windows x86 arch:x86

    c0e0de0c321864bcb6f039dbcaa2c33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XYLogIntl.dll
    .dll windows:5 windows x86 arch:x86

    d69b04ee6104e792509dba81c616c407


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • YIIOTHomePCClientIntl.exe
    .exe windows:5 windows x86 arch:x86

    cc6f42c14a11b123138fc178107c8365


    Headers

    Imports

    Sections

  • avcodec-57.dll
    .dll windows:4 windows x86 arch:x86

    32f611b9ee2df540afab0bdadcd0acd3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avformat-57.dll
    .dll windows:4 windows x86 arch:x86

    e2f1e9a53ca5ef908f65238c87b1e519


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avutil-55.dll
    .dll windows:4 windows x86 arch:x86

    464d4741595f5b5851a9f94a1a2475dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cef.pak
    .js
  • cef_100_percent.pak
  • cef_200_percent.pak
  • cef_extensions.pak
    .js
  • d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    9707d84200e4b4dfa21ef81e51c332e7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    ae50fe19a01644fdf4d7a3b973fb2cd5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    0b63bd14c86c146acbba0232852e4464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86 arch:x86

    4df87f510b02928c902201c28885ce6b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • locales/en-US.pak
  • locales/zh-CN.pak
  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • natives_blob.bin
    .js
  • plugins/codecs/qcncodecs4.dll
    .dll windows:5 windows x86 arch:x86

    dcf5ed1496ecf5c98ccfe2e07b56f610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    3fba836b5b92f0f0b35b7d606410a4e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    234648628dd4c8af896510b5a1ee61eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    2b8f0f1c43b6c00454c57c763517d0fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/sqldrivers/qsqlite4.dll
    .dll windows:5 windows x86 arch:x86

    fddd412ab8b5542bda8681196764d549


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • set/config.ini
  • snapshot_blob.bin
  • ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    8ee9775c09ca9c2cce350b2a0161b9d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swresample-2.dll
    .dll windows:4 windows x86 arch:x86

    7011d2f8bd575eae760101fb923201c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swscale-4.dll
    .dll windows:4 windows x86 arch:x86

    3ced04e882ca7e164cd91ae398d6b201


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis