General

  • Target

    anyfix-ios-system-recovery-en-setup (2).exe

  • Size

    7.1MB

  • MD5

    9c3c41d2f9b7d33d38641e85ba0a5fd9

  • SHA1

    5e3fc663df59515cdf7eb9c4c0a43130a26689ba

  • SHA256

    0609ebd4157f1b0591ab2a98749c0073a479ffae8e3eb5ba560838bb3eaaa0c5

  • SHA512

    2a38369f24c28c310e6ed98506fc89177a00e2766a89ed992fca5867bec55f0125aa0403fe619d051044acdf6f0dfe63c230e072e3732693cd51cce43f616a06

  • SSDEEP

    98304:2aswfDVoKwsGwFzDXoAgjrpeuUaCp1o9Djk5mfZwg4yCr78VEZ7W9xlWes3bdjOi:2VwVssGOzDXYU/s5IsBwTLQGWblMLs/y

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • anyfix-ios-system-recovery-en-setup (2).exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CheckProVs.dll
    .dll windows:5 windows x86 arch:x86

    e8d4e166b8d3ddde3fcf32414a378490


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:6 windows x86 arch:x86

    95fc86e678981f716d756a01610eb55d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll windows:5 windows x86 arch:x86

    816e178c65c5aa0913ea6ddace6809ac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Help.ico
  • $PLUGINSDIR/Setup.ico
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe windows:5 windows x86 arch:x86

    5e3ce2eed99c49477aed11aea6091114


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-install.ico
  • $PLUGINSDIR/msvcp100.dll
    .dll windows:5 windows x64 arch:x64

    9a218d1ec03f40eca74839863a511cb7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDui.dll
    .dll windows:6 windows x86 arch:x86

    d3f3f569d1f2d63a43584ca026dc1ef4


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    a89a235c853214d5f945ce4c2f607130


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    b6854db8fde386e6ef367d623b9e75d8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/track_Official-com.txt
  • $PLUGINSDIR/uninstall.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CheckProVs.dll
    .dll windows:5 windows x86 arch:x86

    e8d4e166b8d3ddde3fcf32414a378490


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll windows:5 windows x86 arch:x86

    816e178c65c5aa0913ea6ddace6809ac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SelfDel.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/SkinBtn.dll
    .dll windows:4 windows x86 arch:x86

    52b4674351d6a835d928718775f75e15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/btn_close.bmp
  • $PLUGINSDIR/btn_install.bmp
  • $PLUGINSDIR/left_path.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/unbg.bmp
  • $PLUGINSDIR/xl.7z
    .7z
  • DuiLib.lib
  • xldownload/download/MiniTPFw.exe
    .exe windows:5 windows x86 arch:x86

    dd995849a26373017906ac9d8c643f62


    Code Sign

    Headers

    Imports

    Sections

  • xldownload/download/MiniThunderPlatform.exe
    .exe windows:4 windows x86 arch:x86

    39c9c7cd2ff99952b66b87f21b223970


    Code Sign

    Headers

    Imports

    Sections

  • xldownload/download/ThunderFW.exe
    .exe windows:5 windows x86 arch:x86

    2fb79d630975ed8d224afda8654df16a


    Code Sign

    Headers

    Imports

    Sections

  • xldownload/download/XLBugHandler.dll
    .dll windows:4 windows x86 arch:x86

    732b5d4d8fe9352080919202202a8fc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xldownload/download/XLBugReport.exe
    .exe windows:4 windows x86 arch:x86

    2d5eb3318716f6f5924e38fcde089028


    Code Sign

    Headers

    Imports

    Sections

  • xldownload/download/atl71.dll
    .dll windows:4 windows x86 arch:x86

    a0bd0cbc6c3c1f3095dd9342b630fcb9


    Headers

    Imports

    Exports

    Sections

  • xldownload/download/dl_peer_id.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    2827932cca8caf8a10f65e148687b7a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xldownload/download/download_engine.dll
    .dll windows:4 windows x86 arch:x86

    d604bec9f17838dae5cca81eba57697a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xldownload/download/id.dat
  • xldownload/download/minizip.dll
    .dll windows:4 windows x86 arch:x86

    42ec74970cf4f102712a1588d5814466


    Headers

    Imports

    Exports

    Sections

  • xldownload/download/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • xldownload/download/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • xldownload/download/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    d00508bfde28cfe9a438e31820271a30


    Headers

    Imports

    Exports

    Sections

  • xldownload/xldl.dll
    .dll windows:4 windows x86 arch:x86

    cccb8b2a5bb513cd2b099023971732ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • xldownload/xldl.h