Overview

overview

7

Static

static

3

MicroSIP-3.21.4.exe

windows7-x64

7

MicroSIP-3.21.4.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

MicroSIP.url

windows7-x64

6

MicroSIP.url

windows10-2004-x64

3

SDL2.dll

windows7-x64

1

SDL2.dll

windows10-2004-x64

1

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

avcodec-57.dll

windows7-x64

3

avcodec-57.dll

windows10-2004-x64

3

avformat-57.dll

windows7-x64

3

avformat-57.dll

windows10-2004-x64

3

avutil-55.dll

windows7-x64

1

avutil-55.dll

windows10-2004-x64

3

lame_enc.dll

windows7-x64

3

lame_enc.dll

windows10-2004-x64

3

microsip.exe

windows7-x64

3

microsip.exe

windows10-2004-x64

3

swscale-4.dll

windows7-x64

3

swscale-4.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    MicroSIP-3.21.4.exe

  • Size

    8.5MB

  • MD5

    34dc216f79c7bf87552bac176217ab1b

  • SHA1

    4e2589c58b255203b83e3785429832c7474ebb0b

  • SHA256

    22b942fc2cc1b2cfb37258ae915bb0930b342af8bf850cda507d93890afafba4

  • SHA512

    0f06575a6c5be08a2bc378b51bbde0048d4b05bb6688393a4752b68325678fd58c940ad06bde459ba2876b7b1012e3299fe3364790e56e3a74e131f52d9a9306

  • SSDEEP

    196608:JviZbPnVCyjNN0qr+laoWaMYkAFpp8LdMXpsEw9yCl6jH:J6KyjDHpwpp8mXpsvyCMT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • MicroSIP-3.21.4.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • License.txt
  • MicroSIP.url
  • SDL2.dll
    .dll windows:6 windows x86 arch:x86

    e8959cb69bed617d0cdd79274df8d999


    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • avcodec-57.dll
    .dll windows:4 windows x86 arch:x86

    3c0d4dfa8fd9653b7b6f5e08645cff92


    Headers

    Imports

    Exports

    Sections

  • avformat-57.dll
    .dll windows:4 windows x86 arch:x86

    7db1200f6f0bdabae036586f657d4f3c


    Headers

    Imports

    Exports

    Sections

  • avutil-55.dll
    .dll windows:4 windows x86 arch:x86

    14c98772434118f92855f1b81dd83bff


    Headers

    Imports

    Exports

    Sections

  • hangup.wav
  • lame_enc.dll
    .dll windows:5 windows x86 arch:x86

    db1263e4d1403a0175a12caa5a870cb3


    Headers

    Imports

    Exports

    Sections

  • langpack_afrikaans.txt
  • langpack_albanian.txt
  • langpack_arabic.txt
  • langpack_armenian.txt
  • langpack_basque.txt
  • langpack_belarusian.txt
  • langpack_bosnian.txt
  • langpack_breton.txt
  • langpack_bulgarian.txt
  • langpack_catalan.txt
  • langpack_croatian.txt
  • langpack_czech.txt
  • langpack_danish.txt
  • langpack_dutch.txt
  • langpack_english.txt.sample
  • langpack_esperanto.txt
  • langpack_estonian.txt
  • langpack_farsi.txt
  • langpack_finnish.txt
  • langpack_french.txt
  • langpack_galician.txt
  • langpack_georgian.txt
  • langpack_german.txt
  • langpack_greek.txt
  • langpack_hebrew.txt
  • langpack_hungarian.txt
  • langpack_icelandic.txt
  • langpack_indonesian.txt
  • langpack_irish.txt
  • langpack_italian.txt
  • langpack_japanese.txt
  • langpack_korean.txt
  • langpack_kurdish.txt
  • langpack_latvian.txt
  • langpack_lithuanian.txt
  • langpack_luxembourgish.txt
  • langpack_macedonian.txt
  • langpack_malay.txt
  • langpack_mongolian.txt
  • langpack_norwegian.txt
  • langpack_norwegiannynorsk.txt
  • langpack_polish.txt
  • langpack_portuguese.txt
  • langpack_portuguesebr.txt
  • langpack_romanian.txt
  • langpack_russian.txt
  • langpack_serbian.txt
  • langpack_serbianlatin.txt
  • langpack_simpchinese.txt
  • langpack_slovak.txt
  • langpack_slovenian.txt
  • langpack_spanish.txt
  • langpack_spanishinternational.txt
  • langpack_swedish.txt
  • langpack_tatar.txt
  • langpack_thai.txt
  • langpack_tradchinese.txt
  • langpack_turkish.txt
  • langpack_ukrainian.txt
  • langpack_uzbek.txt
  • langpack_vietnamese.txt
  • langpack_welsh.txt
  • microsip.exe
    .exe windows:6 windows x86 arch:x86

    e314395476c251ff224eb7f191aa1df4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msgin.wav
  • msgout.wav
  • ringing.wav
  • ringing2.wav
  • ringtone.wav
  • swscale-4.dll
    .dll windows:4 windows x86 arch:x86

    89fe7b007004fd857eb8a2bc74a36ae8


    Headers

    Imports

    Exports

    Sections