General

  • Target

    Huawei_Plugins.rar

  • Size

    222.6MB

  • MD5

    6f4c3e8217beca33128814d0272791bf

  • SHA1

    2563544113b54df05f1407544ed60a6b75104826

  • SHA256

    49f9d5b5b32fd87a768c7574c075a3128f90c1d4155103cfc0c3925aa1b4e10e

  • SHA512

    667f4f5c83e5a12d225e8065e1ee38b76f859b8b0064f5e66c275d8cffa8902343a40c4986e3a7a2429fc527c7b1402b65888da7b738daabb45920bd1ee92d03

  • SSDEEP

    3145728:vylnMoCnOy+yx5IcmpqD59BJPeUpc5OdxUPD6U30NFz/hWVDakij4VnJ9UlrdkaP:vlhOVfAFJPvdxG0NFz/hoak4lrd77Rx

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Huawei_Plugins.rar
    .rar
  • Huawei_Plugins/1-First step.bat
  • Huawei_Plugins/2-Second step.bat
  • Huawei_Plugins/Original_file/HwExScreenConfig.xml
  • Huawei_Plugins/Original_file/HwSoundSupportMachine.xml
    .xml
  • Huawei_Plugins/Original_file/IConnectConfig.json
  • Huawei_Plugins/Original_file/ProductFeature.xml
    .xml
  • Huawei_Plugins/Original_file/UltraGestureSupport.xml
    .xml
  • Huawei_Plugins/Original_file/version.dll
    .dll windows:6 windows x64 arch:x64

    ec866f18c4bc05a95fc480466fca0c37


    Headers

    Imports

    Exports

    Sections

  • Huawei_Plugins/configuration/HwExScreenConfig.xml
  • Huawei_Plugins/configuration/HwSoundSupportMachine.xml
    .xml
  • Huawei_Plugins/configuration/IConnectConfig.json
  • Huawei_Plugins/configuration/ProductFeature.xml
    .xml
  • Huawei_Plugins/configuration/UltraGestureSupport.xml
    .xml
  • Huawei_Plugins/configuration/version.dll
    .dll windows:6 windows x64 arch:x64

    ec866f18c4bc05a95fc480466fca0c37


    Headers

    Imports

    Exports

    Sections

  • Huawei_Plugins/install_package/PCManager_Setup_12.0.2.30(C001D006).exe
    .exe windows:4 windows x86 arch:x86

    c05041e01f84e1ccca9c4451f3b6a383


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/HwSkinButton.dll
    .dll windows:6 windows x86 arch:x86

    f8e3a5def24640ab58b820c58924b3a1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangConfig.ini
  • $PLUGINSDIR/LogEx.dll
    .dll windows:4 windows x86 arch:x86

    549d7b44067bbcdf42bf6a90a80a3a9e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/img/10.1.8.66.png
    .png
  • $PLUGINSDIR/img/9.1.3.55.png
    .png
  • $PLUGINSDIR/img/Slides.dat
  • $PLUGINSDIR/img/SlidesHornor.dat
  • $PLUGINSDIR/img/SlidesHornorNo3.dat
  • $PLUGINSDIR/img/SlidesNo3.dat
  • $PLUGINSDIR/img/SlidesNo34.dat
  • $PLUGINSDIR/img/bg_download_dialog.png
    .png
  • $PLUGINSDIR/img/bg_title.bmp
  • $PLUGINSDIR/img/btn_close1.png
    .png
  • $PLUGINSDIR/img/btn_close2.png
    .png
  • $PLUGINSDIR/img/btn_close_sunset.png
    .png
  • $PLUGINSDIR/img/btn_complete.png
    .png
  • $PLUGINSDIR/img/btn_install.png
    .png
  • $PLUGINSDIR/img/check1.png
    .png
  • $PLUGINSDIR/img/pic_00.png
    .png
  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisSlideshow.dll
    .dll windows:4 windows x86 arch:x86

    8fc94f48a46bd006f33973e3914c7eb1


    Headers

    Imports

    Exports

    Sections

  • Huawei_Plugins/还原插件点我.bat