General

  • Target

    PowerISO8-x64 (1).exe

  • Size

    4.9MB

  • MD5

    d884550a8b075167353db3bc9118dd18

  • SHA1

    5975cbc800d452546a0ec7456d19fccc15ed085a

  • SHA256

    be2c1e8b419d8f8e85fb7a4a4e6a6c908244ee9520f9657da932c23cf7ed4ddb

  • SHA512

    0ec1d112ddb81485c87c68d47e46607e66f7ba60860eea6bb647560ae766af4f41fda002c329de7981fc1a15b5ceffc18fc57c86f42f70bbde427db65027f9bf

  • SSDEEP

    98304:Mu69FGH5tiGVX3FFi1m3fNwyZCe35LC7phV3+0pE34HVdL+8:l69sH54G5uINdZCeJwphQoVdK8

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • PowerISO8-x64 (1).exe
    .exe windows:4 windows x86 arch:x86

    24f4223e271413c25abad52fd456a9bc


    Code Sign

    Headers

    Imports

    Sections

  • $0
    .sys windows:5 windows x64 arch:x64

    8cc86026769dacc3439639a1321b72f8


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $R0
    .exe windows:5 windows x64 arch:x64

    24129f939da41cc56515e833be608d60


    Headers

    Imports

    Sections

  • $TEMP/$0
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Exports

    Sections

  • Lang/Arabic.lng
  • Lang/Armenian.lng
  • Lang/Azerbaijani.lng
  • Lang/Belarusian.lng
  • Lang/Bosnian.lng
  • Lang/Bulgarian.lng
  • Lang/Burmese.lng
  • Lang/Dutch.lng
  • Lang/Farsi.lng
  • Lang/Finnish.lng
  • Lang/German.lng
  • Lang/Greek.lng
  • Lang/Hungarian.lng
  • Lang/Indonesian.lng
  • Lang/Italian.lng
  • Lang/Japanese.lng
  • Lang/Korean.lng
  • Lang/Lithuanian.lng
  • Lang/Malay.lng
  • Lang/Norsk.lng
  • Lang/Polish.lng
  • Lang/Portuguese(Brazil).lng
  • Lang/Romanian.lng
  • Lang/Russian.lng
  • Lang/Serbian(cyrl).lng
  • Lang/SimpChinese.lng
  • Lang/Slovak.lng
  • Lang/Spanish.lng
  • Lang/Swedish.lng
  • Lang/Thai.lng
  • Lang/TradChinese.lng
  • Lang/Turkish.lng
  • Lang/Ukrainian.lng
  • Lang/Urdu(Pakistan).lng
  • Lang/Vietnamese.lng
  • Lang/croatian.lng
  • Lang/czech.lng
  • Lang/danish.lng
  • Lang/french.lng
  • Lang/kazakh.lng
  • Lang/slovenian.lng
  • devcon.exe
    .exe windows:5 windows x64 arch:x64

    24129f939da41cc56515e833be608d60


    Headers

    Imports

    Sections

  • piso.exe
    .exe windows:4 windows x86 arch:x86

    4818d48c3807fc5303b8c1c43730d4fa


    Code Sign

    Headers

    Imports

    Sections

  • setup64.exe
    .exe windows:5 windows x64 arch:x64

    f40095f40192b72a4724ee8f537ca1d9


    Code Sign

    Headers

    Imports

    Sections