General

  • Target

    x64_installer_.x32..zip

  • Size

    25.7MB

  • MD5

    1c4cf5adf350c01605a2ab7d766fec9e

  • SHA1

    2c9d40d611ddee9b81230cfa5aa821cea73da3d7

  • SHA256

    09fdf7344d057c53f167da8ddf450423aee41a0f5152b75f0db0c33c6c028dde

  • SHA512

    45cc93bcafa668618553cc9cc9a9b40402a93cdfec9a3b328461463ed28bcfa4775652fc9d096d47d074e943811e19e595439da8228e4ab85cc2e388211c8513

  • SSDEEP

    786432:FIk8qV4fkH1jRrK5jzLFU5hImB0OrcEnhxa1:iZE4fSjRrK9z+Imfcshxo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • x64_installer_.x32..zip
    .zip

    Password: 2024

  • password.jpg
    .jpg

    Password: 2024

  • x64._setup_.x32.zip
    .zip

    Password: 2024

  • advpack/BFE.DLL
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    db38a12849354850012d502906a251b3


    Headers

    Imports

    Exports

    Sections

  • advpack/advpack.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    f4527a6ef5afe648805e2a19f417a141


    Headers

    Imports

    Exports

    Sections

  • advpack/msaatext.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: 2024

    9ddf7d8ffc4dd644eb79aa3e771dd787


    Headers

    Imports

    Exports

    Sections

  • advpack/nlasvc.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    8374cfb8bd514ce09c524fca92452081


    Headers

    Imports

    Exports

    Sections

  • lpasvc/bcd.dll
    .dll windows:10 windows x64 arch:x64

    Password: 2024

    4561307f8d53e046a9f112710810f6d8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lpasvc/colorui.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: 2024

    7cc1201e2c023aafb71127f32da467a8


    Headers

    Imports

    Exports

    Sections

  • lpasvc/devenum.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    4c9079c33bef679868c8dc14bf0fe71a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lpasvc/lpasvc.dll
    .dll windows:10 windows x64 arch:x64

    3d403dc6ac3f5f9097021deab0c5a183


    Headers

    Imports

    Exports

    Sections

  • msihnd/msihnd.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    bbe5e86e22d3d7703a8c2c7692e32a6a


    Headers

    Imports

    Exports

    Sections

  • msihnd/nlasvc.dll
    .dll windows:10 windows x64 arch:x64

    8374cfb8bd514ce09c524fca92452081


    Headers

    Imports

    Exports

    Sections

  • msihnd/profsvcext.dll
    .dll windows:10 windows x64 arch:x64

    514e0ebbb07b04806015bc28b322511c


    Headers

    Imports

    Exports

    Sections

  • msihnd/shdocvw.dll
    .dll windows:10 windows x64 arch:x64

    976a58162ec56583a031b05be5951cdb


    Headers

    Imports

    Exports

    Sections

  • setup.msi
    .msi
  • taskcomp/ppcsnap.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    4c8643e25d8890880fa02c675c74a56f


    Headers

    Imports

    Exports

    Sections

  • taskcomp/scecli.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    4cf2cb1bb507221d91e434473bfb8b6d


    Headers

    Imports

    Exports

    Sections

  • taskcomp/taskcomp.dll
    .dll windows:10 windows x64 arch:x64

    89df54b176214273566f0e2cdd37ad01


    Headers

    Imports

    Exports

    Sections

  • vcomp110/Windows.Globalization.dll
    .dll windows:10 windows x64 arch:x64

    819122ec5350ef6ca97ced8da9aef194


    Headers

    Imports

    Exports

    Sections

  • vcomp110/dnshc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    01e70949ce456b6981c9a9bda86d2b06


    Headers

    Imports

    Exports

    Sections

  • vcomp110/sbe.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    d83b24c08477d6d5715f9d95e9c2a700


    Headers

    Imports

    Exports

    Sections

  • vcomp110/vcomp110.dll
    .dll windows:6 windows x64 arch:x64

    28a10866a1268b2e8eddc8b656769c45


    Code Sign

    Headers

    Imports

    Exports

    Sections