General

  • Target

    susetupPro.exe

  • Size

    10.5MB

  • MD5

    b4246bb878d5546348f8e105e9f4021f

  • SHA1

    bcdb99f9dae51b33569be4dec8c5069c0f467498

  • SHA256

    a0540bb2d4127de441ad9572feacf04caceaf3ad6c29da7b675e5a68f8073f82

  • SHA512

    e887797b640d2dab6e1932c07b00ae1a2edf1cf6a2ae04bd4cfe20297d95001c7865d70615a5ba062f7f7d68db7e8f36b7f356e23145db22bf448a61fe4635f1

  • SSDEEP

    196608:DvH6DtTZ1n0nEp8Mn82RM4RcMO0SlFNH8U6YIR6HgeLUQA:DvaDdLaa82e42ByYvLG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • susetupPro.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    691d649a682adb332a1f6554cd41be05


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MachineCode.dll
    .dll windows:5 windows x86 arch:x86

    5f61d48cbd2fe6358e13833e3dd30585


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/popularize.ico
  • $PLUGINSDIR/softwareupdatePro.ini
  • AppMetrics.dll
    .dll windows:5 windows x86 arch:x86

    07aadeb04f518fc6c625393aa294f730


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CheckUpdate.dll
    .dll windows:5 windows x86 arch:x86

    cd4e57f74adb4b810e0bdba87954dc93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Config.dll
    .dll windows:5 windows x86 arch:x86

    65ca07e8a00f22048f652c6702ef0100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CrashReport.dll
    .dll windows:5 windows x86 arch:x86

    fd07e2e2c8bf222eb8bca2b80a9ebdaf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CrashReport.exe
    .exe windows:5 windows x86 arch:x86

    020bbbf3e33c22083ad2a41d9c6463a6


    Code Sign

    Headers

    Imports

    Sections

  • GUWndManager.dll
    .dll windows:5 windows x86 arch:x86

    ef482a70a95a806fa39d46a4f56d9be8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Initialize_Standalone_Pro.exe
    .exe windows:5 windows x86 arch:x86

    87b10276413d46940e0e9619d7cda55b


    Code Sign

    Headers

    Imports

    Sections

  • LockDll.dll
    .dll windows:5 windows x86 arch:x86

    b57acfb7889744f628cd9fbd9a998097


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MachineCode.dll
    .dll windows:5 windows x86 arch:x86

    5f61d48cbd2fe6358e13833e3dd30585


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT.manifest
    .xml
  • Microsoft.VC90.MFC.manifest
    .xml
  • Modifyiconmodule.exe
    .exe windows:5 windows x86 arch:x86

    2d545431275ef88a7887119d6954271b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ObjectAdmin.dll
    .dll windows:5 windows x86 arch:x86

    7c6c4a746673fa6f6cfaa86d265ed04d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Register.dll
    .dll windows:5 windows x86 arch:x86

    dd310decd06e12febef7a291886b20b1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resources/SoftwareUpdatePro/Check.png
    .png
  • Resources/SoftwareUpdatePro/CheckBox.bmp
  • Resources/SoftwareUpdatePro/CheckBoxOk.bmp
  • Resources/SoftwareUpdatePro/Checkpath_Check.png
    .png
  • Resources/SoftwareUpdatePro/Close.png
    .png
  • Resources/SoftwareUpdatePro/Close_Check.png
    .png
  • Resources/SoftwareUpdatePro/Close_Move.png
    .png
  • Resources/SoftwareUpdatePro/Facebook.png
    .png
  • Resources/SoftwareUpdatePro/Facebook_Check.png
    .png
  • Resources/SoftwareUpdatePro/Facebook_Move.png
    .png
  • Resources/SoftwareUpdatePro/Genel.png
    .png
  • Resources/SoftwareUpdatePro/General_Move.png
    .png
  • Resources/SoftwareUpdatePro/Generl_Check.png
    .png
  • Resources/SoftwareUpdatePro/Hand.gif
    .gif
  • Resources/SoftwareUpdatePro/Hight.png
    .png
  • Resources/SoftwareUpdatePro/Install.png
    .png
  • Resources/SoftwareUpdatePro/Install_Check.png
    .png
  • Resources/SoftwareUpdatePro/Install_Move.png
    .png
  • Resources/SoftwareUpdatePro/Max.png
    .png
  • Resources/SoftwareUpdatePro/Max1.png
    .png
  • Resources/SoftwareUpdatePro/Max1_Check.png
    .png
  • Resources/SoftwareUpdatePro/Max1_Move.png
    .png
  • Resources/SoftwareUpdatePro/Max_Check.png
    .png
  • Resources/SoftwareUpdatePro/Max_Move.png
    .png
  • Resources/SoftwareUpdatePro/Menu_Check.png
    .png
  • Resources/SoftwareUpdatePro/Menu_Langua.png
    .png
  • Resources/SoftwareUpdatePro/Menu_Move.png
    .png
  • Resources/SoftwareUpdatePro/Min.png
    .png
  • Resources/SoftwareUpdatePro/Min_Check.png
    .png
  • Resources/SoftwareUpdatePro/Min_Move.png
    .png
  • Resources/SoftwareUpdatePro/Move.png
    .png
  • Resources/SoftwareUpdatePro/Nomal.png
    .png
  • Resources/SoftwareUpdatePro/Regest.png
    .png
  • Resources/SoftwareUpdatePro/RegestOk.png
    .png
  • Resources/SoftwareUpdatePro/RegestOk_Check.png
    .png
  • Resources/SoftwareUpdatePro/RegestOk_Move.png
    .png
  • Resources/SoftwareUpdatePro/Regest_Check.png
    .png
  • Resources/SoftwareUpdatePro/Regest_Move.png
    .png
  • Resources/SoftwareUpdatePro/Remote.png
    .png
  • Resources/SoftwareUpdatePro/Remote_Check.png
    .png
  • Resources/SoftwareUpdatePro/Remote_Move.png
    .png
  • Resources/SoftwareUpdatePro/Select.GIF
    .gif
  • Resources/SoftwareUpdatePro/Send.GIF
    .gif
  • Resources/SoftwareUpdatePro/Settings.png
    .png
  • Resources/SoftwareUpdatePro/Settings_Check.png
    .png
  • Resources/SoftwareUpdatePro/Settings_Move.png
    .png
  • Resources/SoftwareUpdatePro/UnCheckBox.bmp
  • Resources/SoftwareUpdatePro/Updates.png
    .png
  • Resources/SoftwareUpdatePro/Updates_Check.png
    .png
  • Resources/SoftwareUpdatePro/Updates_Move.png
    .png
  • Resources/SoftwareUpdatePro/Version.bmp
  • Resources/SoftwareUpdatePro/checkpath.png
    .png
  • Resources/SoftwareUpdatePro/checkpath_Move.png
    .png
  • Resources/SoftwareUpdatePro/home.png
    .png
  • Resources/SoftwareUpdatePro/home_Check.png
    .png
  • Resources/SoftwareUpdatePro/home_Move.png
    .png
  • ShortcutFixer.dll
    .dll windows:5 windows x86 arch:x86

    383bcbdd34960f9b260edb3a1d346597


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SkinsManager.dll
    .dll windows:5 windows x86 arch:x86

    df3ad5c1cb31ac46af3d99aab1837b04


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SoftwareUpdatePro.exe
    .exe windows:5 windows x86 arch:x86

    748d92283cd2a269a4dcb30abba11e83


    Code Sign

    Headers

    Imports

    Sections

  • data/ModuleInfo.ini
  • data/Softwareupdate.xml
  • data/rule.ini
  • languages.dll
    .dll windows:5 windows x86 arch:x86

    ecaa0e2967181c64de89c8e2f74a2c26


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • languages/Afrikaans - [M.D.].lng
  • languages/Albanian - [M.D.].lng
  • languages/Amharic - [M.D.].lng
  • languages/Arabic - [M.D.].lng
  • languages/Armenian.lng
  • languages/Bulgarian.lng
  • languages/Catala.lng
  • languages/Catala_Joan.lng
  • languages/Croatian.lng
  • languages/Cymraeg.lng
  • languages/Czech.lng
  • languages/Czech_Damned.lng
  • languages/Danish(pallan).lng
  • languages/Danish.lng
  • languages/Danish_kt.lng
  • languages/English (proofread by Dillon Ring).lng
  • languages/Espanol_River.lng
  • languages/Estonian.lng
  • languages/Farsi.lng
  • languages/Finnish.lng
  • languages/Finnish_velimatti.lng
  • languages/Francais (Philippe).lng
  • languages/Francais (ReActif).lng
  • languages/Francais (Tonton Greg).lng
  • languages/Francais by gilleliot.lng
  • languages/Francais(PLL).lng
  • languages/Francais.lng
  • languages/French (Ad Lib).lng
  • languages/French by Joe.lng
  • languages/French(#DG#).lng
  • languages/French(CA).lng
  • languages/French(FR).lng
  • languages/French_(RT).lng
  • languages/German.lng
  • languages/German_Andy Kleinert.lng
  • languages/German_Erik.lng
  • languages/German_Sarakael.lng
  • languages/Greek.lng
  • languages/Hungarian (Timinoun).lng
  • languages/Hungarian.lng
  • languages/Hungarian_l2belteki.lng
  • languages/Igbo.lng
  • languages/Italian_millo.lng
  • languages/Korean by venusgirl.lng
  • languages/Korean_kornet21c.lng
  • languages/Magyar.lng
  • languages/Magyar2.lng
  • languages/PTpt.lng
  • languages/Portuguese_Brazilian.lng
  • languages/Romana.lng
  • languages/Romania.lng
  • languages/Romanian(zocoza).lng
  • languages/Russian (ViktorOn).lng
  • languages/Serbian latin.lng
  • languages/Serbian.lng
  • languages/Slovak_bugtom.lng
  • languages/Slovak_momirek.lng
  • languages/Swedish(ulfclaesson).lng
  • languages/Swedish.lng
  • languages/Turkish_Anteplim.lng
  • languages/Trkce T9.lng
  • languages/Zoulou.lng
  • languages/arabic.lng
  • languages/arabic_Saif.lng
  • languages/bosnian.lng
  • languages/chinese.lng
  • languages/chineseT.lng
  • languages/dutch.lng
  • languages/dutch_hmg.lng
  • languages/english.lng
  • languages/french.lng
  • languages/french2.lng
  • languages/french_Morvant.lng
  • languages/french_andex.lng
  • languages/french_largo.lng
  • languages/french_nantesph.lng
  • languages/hebrew.lng
  • languages/italian.lng
  • languages/italian2.lng
  • languages/italian3.lng
  • languages/italian_alexvis2015.lng
  • languages/japanese.lng
  • languages/japanese_lb.lng
  • languages/korean.lng
  • languages/kurdish.lng
  • languages/latvian.lng
  • languages/lithuanian.lng
  • languages/norwegian.lng
  • languages/norwegian_kurt.lng
  • languages/polish.lng
  • languages/polish_Marta.lng
  • languages/ptbr.lng
  • languages/russian.lng
  • languages/slovenian.lng
  • languages/slovenian_jrudec.lng
  • languages/spain.lng
  • languages/spanish (McM).lng
  • languages/spanish (antonio perez).lng
  • languages/spanish (smrolando).lng
  • languages/spanish.lng
  • languages/spanish_cannie new.lng
  • languages/spanish_emiliograo.lng
  • languages/spanish_ignacio.lng
  • languages/turkish.lng
  • languages/turkish_FaraDelisi.lng
  • languages/ukrainian.lng
  • languages/ukrainian2.lng
  • languages/vietnamese.lng
  • languages/ by firecold.lng
  • languages/.lng
  • mfc90.dll
    .dll windows:5 windows x86 arch:x86

    f2d8030f2fb5ae92ea26c320740a673b


    Code Sign

    Headers

    Imports

    Sections

  • mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    814d9e5c82b805568941908a38d8a5f5


    Code Sign

    Headers

    Imports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.dll
    .dll windows:5 windows x86 arch:x86

    de4e372bd78ecf6f6fd3fbe8f959c0ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.ini
  • skins/default/Register/InnerBuyRSS/English/images/ico-5.png
    .png
  • skins/default/Register/active_click.png
    .png
  • skins/default/Register/active_hover.png
    .png
  • skins/default/Register/active_normal.png
    .png
  • skins/default/Register/buy_click.png
    .png
  • skins/default/Register/buy_hover.png
    .png
  • skins/default/Register/buy_normal.png
    .png
  • skins/default/Register/close_click.png
    .png
  • skins/default/Register/close_hover.png
    .png
  • skins/default/Register/close_normal.png
    .png
  • skins/default/Register/contact_us.png
    .png
  • skins/default/Register/edit_disable.png
    .png
  • skins/default/Register/edit_focus.png
    .png
  • skins/default/Register/edit_normal.png
    .png
  • skins/default/Register/email_focus.png
    .png
  • skins/default/Register/email_normal.png
    .png
  • skins/default/Register/export_click.png
    .png
  • skins/default/Register/export_hover.png
    .png
  • skins/default/Register/export_normal.png
    .png
  • skins/default/Register/login_click.png
    .png
  • skins/default/Register/login_hover.png
    .png
  • skins/default/Register/login_normal.png
    .png
  • skins/default/Register/logo.png
    .png
  • skins/default/Register/logomenu_click.png
    .png
  • skins/default/Register/logomenu_hover.png
    .png
  • skins/default/Register/logomenu_normal.png
    .png
  • skins/default/Register/main_logo.png
    .png
  • skins/default/Register/menu_active.png
    .png
  • skins/default/Register/menu_cancel.png
    .png
  • skins/default/Register/menu_signin.png
    .png
  • skins/default/Register/menu_signup.png
    .png
  • skins/default/Register/menu_switch_user.png
    .png
  • skins/default/Register/my_account_menu.png
    .png
  • skins/default/Register/my_account_menu_border.png
    .png
  • skins/default/Register/my_app_img.png
    .png
  • skins/default/common/1.png
    .png
  • skins/default/common/skin.ini
  • sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    f74dcd8be093ec41148d2e338b384046


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Inetc.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    691d649a682adb332a1f6554cd41be05


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • x64ProcessAssist.dll
    .dll windows:5 windows x86 arch:x86

    101458f4298fbbbddd2517c2244c2a81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    836a7d41d44b617141edbee32b493b8e


    Code Sign

    Headers

    Imports

    Exports

    Sections