General

  • Target

    最新Apixia20180212.zip.zip

  • Size

    40.8MB

  • MD5

    36c5abd34f249895190bd19aa3d82f0c

  • SHA1

    8a6f63075a54d1dcaa689a8bbb89722650ad92ab

  • SHA256

    2875c5f7f5c06550e744bb6eab3c10c22a85431fb9316e3e5c3742cc8a49d3be

  • SHA512

    87bead5f4bc4e8ac69c50abb7acfd2c8fe46e3e4363f8d42b7ed2fdc1a373fe040b1a837611ec35f37dd7047a9ea7863bcb3c5416ad9726323ed14f0e195128c

  • SSDEEP

    786432:p4xsBXlu9bHDB7T5WUcyBZA/+08DeUD5eLMFFoGfNJ6f4:mwluBBH5WUv3Q+08CUVMM4G64

Score
3/10

Malware Config

Signatures

  • Unsigned PE 64 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 22 IoCs

Files

  • 最新Apixia20180212.zip.zip
    .zip

    Password: infected

  • 最新Apixia20180212.zip
    .zip
  • ŐVApixia20180212/Apixia software3.0h.Z/Setup-CLIENT(3.0h.Z).exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • APIXIA_CMOS105.dll
    .dll windows:5 windows x86 arch:x86

    423ef0efb5e30f0e2dcfd67ca3673653


    Headers

    Imports

    Exports

    Sections

  • APIXIA_CMOS_SDK.ini
  • ApixiaViewerNet.exe
    .exe windows:4 windows x86 arch:x86

    ec3933adc532d6abb8edf24455d9a5fe


    Headers

    Imports

    Exports

    Sections

  • Apixia_Network_PSP.dll
    .dll windows:5 windows x86 arch:x86

    4893a4a414d56a312bc5a6bacdc0302b


    Headers

    Imports

    Exports

    Sections

  • Apixia_Network_PSP_Sample.exe
    .exe windows:5 windows x86 arch:x86

    66875369bd320ec689cd8bfde8d32a3b


    Headers

    Imports

    Sections

  • Apixia_PSP.dll
    .dll windows:5 windows x86 arch:x86

    e7a28837819f2bbc7cb41695c8572d36


    Headers

    Imports

    Exports

    Sections

  • BigBtn.bmp
  • BlackBtn.bmp
  • CamSDK.dll
    .dll windows:4 windows x86 arch:x86

    c2966aa7f73f30c1a338d49293362a3d


    Headers

    Imports

    Exports

    Sections

  • Close.bmp
  • Config.exe
    .exe windows:5 windows x86 arch:x86

    403ab4c9c0ac87d129a6c5ad5de083f4


    Headers

    Imports

    Sections

  • ConfigSkin.zip
    .zip
  • ApixiaConfig.exe
    .exe windows:5 windows x86 arch:x86

    525fb065dc69eb381198d81d1527e669


    Headers

    Imports

    Sections

  • BigBtn.bmp
  • BlackBtn.bmp
  • Close.bmp
  • Coordinate.ini
  • Main.bmp
  • Page.bmp
  • SmallBtn.bmp
  • String.ini
  • Tab.bmp
  • Coordinate.ini
  • DATA/PatientInfo.ini
  • DCRTC.dll
  • Dental.ini
  • Dicom.ini
  • DicomGather.exe
    .exe windows:4 windows x86 arch:x86

    4024b7fe07c751149053ff9669658316


    Headers

    Imports

    Exports

    Sections

  • DicomSender.exe
    .exe windows:4 windows x86 arch:x86

    934162d2abc69fb0e358f8c0134d50de


    Headers

    Imports

    Exports

    Sections

  • FMS/000.fms
  • FMS/001.fms
  • FMS/002.fms
  • FMS/003.fms
  • FMS/004.fms
  • FMS/005.fms
  • FMS/006.fms
  • FMS/007.fms
  • FMS/008.fms
  • FMS/009.fms
  • FMS/010.fms
  • FMS/011.fms
  • FMS/012.fms
  • FMS/013.fms
  • FMS/014.fms
  • FMS/015.fms
  • FMS/016.fms
  • IMEFullShape.dll
    .dll windows:5 windows x86 arch:x86

    806d128894ccaef8532dff211181d6a6


    Headers

    Imports

    Exports

    Sections

  • ImageProcessLib.dll
    .dll windows:5 windows x86 arch:x86

    8cee8e2d20aaa6ded122b03851ff5c2e


    Headers

    Imports

    Exports

    Sections

  • ImportPatient.dll
    .dll windows:4 windows x86 arch:x86

    b754c6c13e5fe113dcf98ce596ed627f


    Headers

    Imports

    Exports

    Sections

  • LTDIC13n.dll
    .dll windows:4 windows x86 arch:x86

    64baae22f06348a2cbc4929235acb48e


    Headers

    Imports

    Exports

    Sections

  • LTKRN13n.dll
    .dll windows:4 windows x86 arch:x86

    6845abeb89cbaee236515f4a29f307fd


    Headers

    Imports

    Exports

    Sections

  • Language.ini
  • Main.bmp
  • Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
    .xml
  • Microsoft.VC90.CRT/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OneTouchEnhance.dll
    .dll windows:5 windows x86 arch:x86

    fa8ade593cb764c3446d63ac2edabf7a


    Headers

    Imports

    Exports

    Sections

  • PSP.ini
  • Page.bmp
  • SaveNotify.ini
  • ServerIP.ini
  • Setting.exe
    .exe windows:5 windows x86 arch:x86

    5718e08e6dc89ea32ec313155880be95


    Headers

    Imports

    Sections

  • Setting.ini
  • SmallBtn.bmp
  • StitchLib.dll
    .dll windows:5 windows x86 arch:x86

    54b83480b8679b60ded458165eecb9f7


    Headers

    Imports

    Exports

    Sections

  • Tab.bmp
  • cximagecrt.dll
    .dll windows:4 windows x86 arch:x86

    a0a17d7739a8f18ddb2ae390e04996df


    Headers

    Imports

    Exports

    Sections

  • cximagecrtu.dll
    .dll windows:5 windows x86 arch:x86

    f28ee425bcdccc52b8077ac66a745254


    Headers

    Imports

    Exports

    Sections

  • digirex.exe
    .exe windows:4 windows x86 arch:x86

    dec300bf9efb433988d5bc45afecbce9


    Headers

    Imports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opencv_core240.dll
    .dll windows:5 windows x86 arch:x86

    c3373d03814bf29e0eb3ed3862e014dd


    Headers

    Imports

    Exports

    Sections

  • opencv_highgui240.dll
    .dll windows:5 windows x86 arch:x86

    9a50ff8898867b4be60f52d5d0691a31


    Headers

    Imports

    Exports

    Sections

  • opencv_imgproc240.dll
    .dll windows:5 windows x86 arch:x86

    c64bafe47e6b4b8970051b4ff73e4d0f


    Headers

    Imports

    Exports

    Sections

  • string_CZ.ini
  • string_JP.ini
  • string_e.ini
  • string_fr.ini
  • string_g.ini
  • string_hb.ini
  • string_indo.ini
  • string_it.ini
  • string_kr.ini
  • string_pl.ini
  • string_pt.ini
  • string_ru.ini
  • string_sc.ini
  • string_sp.ini
  • string_tc.ini
  • string_tchk.ini
  • string_th.ini
  • string_ukr.ini
  • tbb.dll
    .dll windows:5 windows x86 arch:x86

    d91ab5c74435ce162b00ecf491163326


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • ŐVApixia20180212/Apixia software3.0h.Z/Setup-SERVER(3.0h.Z).exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • DATA/PatientInfo.ini
  • DigirexServer.exe
    .exe windows:4 windows x86 arch:x86

    235b0a4473ce861cc82f643a30a53c68


    Headers

    Imports

    Exports

    Sections

  • ServerLanguage.ini
  • ServerSkin.zip
    .zip
  • BigBtn.bmp
  • BigGray.bmp
  • Coordinate.ini
  • ExtraBigBtn.bmp
  • Main.bmp
  • PageA.bmp
  • PageB.bmp
  • PageC.bmp
  • PageD.bmp
  • SelectLanguage.bmp
  • SelectLanguageBtn.bmp
  • SmallGray.bmp
  • Tab.bmp
  • Warning.bmp
  • WarningBtn.bmp
  • ServerString_JP.ini
  • ServerString_cz.ini
  • ServerString_e.ini
  • ServerString_fr.ini
  • ServerString_g.ini
  • ServerString_hb.ini
  • ServerString_indo.ini
  • ServerString_it.ini
  • ServerString_kr.ini
  • ServerString_pl.ini
  • ServerString_pt.ini
  • ServerString_ru.ini
  • ServerString_sc.ini
  • ServerString_sp.ini
  • ServerString_tc.ini
  • ServerString_tchk.ini
  • ServerString_th.ini
  • ServerString_ukr.ini
  • cximagecrt.dll
    .dll windows:4 windows x86 arch:x86

    a0a17d7739a8f18ddb2ae390e04996df


    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    40512658f087f2990d621c454c392124


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    b78ecf47c0a3e24a6f4af114e2d1f5de


    Headers

    Imports

    Sections

  • ŐVApixia20180212/Driver/Win7Driver_32bit.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CMOS105.inf
  • CyUSB.sys
    .sys windows:6 windows x86 arch:x86

    2958acda1f2ebd2100c0f8f7565488e8


    Headers

    Imports

    Sections

  • DPInst.exe
    .exe windows:6 windows x86 arch:x86

    9e5cb411064a7200eb0a2a10466e8d0a


    Code Sign

    Headers

    Imports

    Sections

  • PSP105.inf
  • cmos105amd64.cat
  • cmos105x86.cat
  • psp105amd64.cat
  • psp105x86.cat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • ŐVApixia20180212/Driver/XP32bit_Driver_1.0(b).exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CMOS105.inf
  • DPInst.exe
    .exe windows:6 windows x86 arch:x86

    9e5cb411064a7200eb0a2a10466e8d0a


    Code Sign

    Headers

    Imports

    Sections

  • PSP108.inf
  • cmos105amd64.cat
  • cmos105x86.cat
  • cyusb.sys
    .sys windows:6 windows x86 arch:x86

    c5a204bebd710d8328709bf6b3b446a9


    Headers

    Imports

    Sections

  • psp108x86.cat
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • ŐVApixia20180212/IPConfig/IPConfig.exe
    .exe windows:5 windows x86 arch:x86

    0590785ea0aad0c0b1366b7036d1964c


    Headers

    Imports

    Sections

  • ŐVApixia20180212/TWAIN1.0f.L.TG/1.0f.L_1.TG(PSP-TWAIN).exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • APIXIA_CMOS105.dll
    .dll windows:5 windows x86 arch:x86

    423ef0efb5e30f0e2dcfd67ca3673653


    Headers

    Imports

    Exports

    Sections

  • APIXIA_CMOS_SDK.ini
  • ApixiaGUI.exe
    .exe windows:5 windows x86 arch:x86

    5093bcacce585491c785d82f3a20c721


    Headers

    Imports

    Sections

  • Apixia_Network_PSP.dll
    .dll windows:5 windows x86 arch:x86

    4893a4a414d56a312bc5a6bacdc0302b


    Headers

    Imports

    Exports

    Sections

  • Apixia_PSP.dll
    .dll windows:5 windows x86 arch:x86

    e7a28837819f2bbc7cb41695c8572d36


    Headers

    Imports

    Exports

    Sections

  • Config.exe
    .exe windows:5 windows x86 arch:x86

    525fb065dc69eb381198d81d1527e669


    Headers

    Imports

    Sections

  • ConfigSkin.zip
    .zip
  • Dental.ini
  • FreeImage.dll
    .dll windows:4 windows x86 arch:x86

    d6710108273f3436a23c1a3ed927eee0


    Headers

    Imports

    Exports

    Sections

  • GUISkin.zip
    .zip
  • ImageProcessLib.dll
    .dll windows:5 windows x86 arch:x86

    8cee8e2d20aaa6ded122b03851ff5c2e


    Headers

    Imports

    Exports

    Sections

  • OneTouchEnhance.dll
    .dll windows:5 windows x86 arch:x86

    06d211f84098ff60fb1c941ef50c5a01


    Headers

    Imports

    Exports

    Sections

  • PSP.ini
  • PSPInterface.dll
    .dll windows:4 windows x86 arch:x86

    9b67b685ccb421812fbb2b100e2294aa


    Headers

    Imports

    Exports

    Sections

  • PSPSetting.ini
  • Setting.exe
    .exe windows:5 windows x86 arch:x86

    5718e08e6dc89ea32ec313155880be95


    Headers

    Imports

    Sections

  • Setting.ini
  • StitchLib.dll
    .dll windows:5 windows x86 arch:x86

    54b83480b8679b60ded458165eecb9f7


    Headers

    Imports

    Exports

    Sections

  • TWAINDS_APIXIA_COMMON.ds
    .dll windows:5 windows x86 arch:x86

    0ce355af8d16c93952072f71c36744bb


    Headers

    Imports

    Exports

    Sections

  • cximagecrt.dll
    .dll windows:5 windows x86 arch:x86

    139c63adb29588219a9d2d7cc94f39b2


    Headers

    Imports

    Exports

    Sections

  • cximagecrtu.dll
    .dll windows:5 windows x86 arch:x86

    f28ee425bcdccc52b8077ac66a745254


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opencv_core240.dll
    .dll windows:5 windows x86 arch:x86

    c3373d03814bf29e0eb3ed3862e014dd


    Headers

    Imports

    Exports

    Sections

  • opencv_highgui240.dll
    .dll windows:5 windows x86 arch:x86

    9a50ff8898867b4be60f52d5d0691a31


    Headers

    Imports

    Exports

    Sections

  • opencv_imgproc240.dll
    .dll windows:5 windows x86 arch:x86

    c64bafe47e6b4b8970051b4ff73e4d0f


    Headers

    Imports

    Exports

    Sections

  • tbb.dll
    .dll windows:5 windows x86 arch:x86

    d91ab5c74435ce162b00ecf491163326


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • ŐVApixia20180212/TWAIN1.0f.L.TG/1.0f.L_2.TG(PSP-TWAIN).exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • ŐVApixia20180212/patch/2008vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections

  • ŐVApixia20180212/patch/2008vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections

  • ŐVApixia20180212/patch/2010vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • ŐVApixia20180212/patch/2010vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections