General

  • Target
    anyunlock-iphone-password-unlocker-en-setup.exe
  • Size 18.1MB
  • Sample240402-zn2dcsdc51
  • SHA256 a213e0faf45cabad343b34a05a65ef437bed06fdf392a01a25b28def670a70e2
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • anyunlock-iphone-password-unlocker-en-setup.exe
    .exe 18.1MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/Help.ico
    185KB
  • $PLUGINSDIR/Setup.ico
    264KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/UninstallLaunch.ico
    70KB
  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe 982KB
  • $PLUGINSDIR/ico.ico
    185KB
  • $PLUGINSDIR/modern-install.ico
    264KB
  • $PLUGINSDIR/nsDui.dll
    .dll 5.8MB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 313KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/track_Official-com.txt
    33B
  • $PLUGINSDIR/uninstall.exe
    .exe 11.2MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/SelfDel.dll
    .dll 5KB
  • out.upx
    .dll 5KB
  • $PLUGINSDIR/SkinBtn.dll
    .dll 4KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/btn_close.bmp
    19KB
  • $PLUGINSDIR/btn_install.bmp
    134KB
  • $PLUGINSDIR/left_path.bmp
    28KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/un.exe
    .exe 11.7MB
  • $PLUGINSDIR/unbg.bmp
    786KB
  • $PLUGINSDIR/uninstall.ini
    149B

anyunlock-iphone-password-unlocker-en-setup.exe

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 a213e0faf45cabad343b34a05a65ef437bed06fdf392a01a25b28def670a70e2
  • MD5 SHA1 SHA512 SSDEEP
Digest
ad:7a:8b:73:97:bc:ef:d8:ab:28:12:26:52:10:2a:fe:9f:88:1a:c8:a5:ce:70:c2:ca:93:77:d4:ca:69:17:d0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=C4175219,CN=iMobie Inc.,O=iMobie Inc.,POSTALCODE=92618,STREET=113 Iron Gate,L=Irvine,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
5
Entry point
13333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths