General

  • Target

    vdhcoapp-windows-x86_64-installer.exe

  • Size

    39.6MB

  • MD5

    d39f2bb352876d16d8661fedbf5f0252

  • SHA1

    851490097f175670e8579337ff26aeb24ba7837e

  • SHA256

    e1af498f95432a4f2f666a8cbec7bd6ab9deb4d1695c6e7cde7acb9bd408e600

  • SHA512

    f0eb2d623f453dfef4b54731803a81829b884a4f5eebd6ac52c90ece0a0a35db436f1593d0518652f3e5a868b91debd385e46084305a66d3bb0cbb06591daeb4

  • SSDEEP

    786432:LpOTaUwkPJWCHv9yUF+EuiBhfkV7IgGj4uXhmuTJJB6:LptUwC98nliLfkmlXhjTJO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • vdhcoapp-windows-x86_64-installer.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • ffmpeg.exe
    .exe windows:4 windows x64 arch:x64

    8f4efacf853205fb2e2908859e083404


    Headers

    Imports

    Exports

    Sections

  • ffprobe.exe
    .exe windows:4 windows x64 arch:x64

    1674a40efe4b073a0b9ce68d713ec80e


    Headers

    Imports

    Exports

    Sections

  • filepicker.exe
    .exe windows:4 windows x64 arch:x64

    0fbcb1d673f3335d3114235e66edeeee


    Headers

    Imports

    Sections

  • google.json
  • microsoft.json
  • mozilla.json
  • uninstall.exe.nsis
  • vdhcoapp.exe
    .exe windows:6 windows x64 arch:x64

    4d0fb8dc9ee470058274f448bebbb85f


    Headers

    Imports

    Exports

    Sections