Overview

overview

4

Static

static

3

CL_Win8Helper.ps1

windows7-x64

3

CL_Win8Helper.ps1

windows10-2004-x64

3

DiagPackage.dll

windows7-x64

1

DiagPackage.dll

windows10-2004-x64

1

MF_Windows...er.ps1

windows7-x64

3

MF_Windows...er.ps1

windows10-2004-x64

3

MSIMATSFN.ps1

windows7-x64

3

MSIMATSFN.ps1

windows10-2004-x64

3

RS_Missing...he.ps1

windows7-x64

4

RS_Missing...he.ps1

windows10-2004-x64

3

RS_RapidPr...al.ps1

windows7-x64

3

RS_RapidPr...al.ps1

windows10-2004-x64

3

RS_Wow64Detect.ps1

windows7-x64

3

RS_Wow64Detect.ps1

windows10-2004-x64

3

TS_Missing...he.ps1

windows7-x64

3

TS_Missing...he.ps1

windows10-2004-x64

3

TS_RapidPr...al.ps1

windows7-x64

3

TS_RapidPr...al.ps1

windows10-2004-x64

3

TS_Wow64Detect.ps1

windows7-x64

3

TS_Wow64Detect.ps1

windows10-2004-x64

3

VF_RapidPr...al.ps1

windows7-x64

3

VF_RapidPr...al.ps1

windows10-2004-x64

3

Win8Global...or.ps1

windows7-x64

3

Win8Global...or.ps1

windows10-2004-x64

3

Win8Library.ps1

windows7-x64

3

Win8Library.ps1

windows10-2004-x64

3

Win8RC.RS.ps1

windows7-x64

3

Win8RC.RS.ps1

windows10-2004-x64

3

Win8RC.TS.ps1

windows7-x64

3

Win8RC.TS.ps1

windows10-2004-x64

3

Win8RC.VF.ps1

windows7-x64

3

Win8RC.VF.ps1

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MicrosoftProgram_Install_and_Uninstall.meta.diagcab

  • Size

    218KB

  • MD5

    7421b66d5262513da783747c831df792

  • SHA1

    06ffc487a37374b15e81b4d272f78f2b574cc765

  • SHA256

    8cad66adb36b1f4f64204a4328a063ae33695dbbd5386f761cfb56c2c0987471

  • SHA512

    15f75477e7aa6a80eb26aadfc2d9741989a1ee8f359f7b6ddd229ea3b166f17acdfd0358b92c618de82c1d8d28854d114f46b249ead412ae3da0d82c719b85d1

  • SSDEEP

    6144:B2CHE7b1ABl947ylLipv6jAoLmLbvzSqz9f:BbE/6K762pviSLTzv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 39 IoCs

    Checks for missing Authenticode signature.

Files

  • MicrosoftProgram_Install_and_Uninstall.meta.diagcab
    .cab
  • CL_Win8Helper.ps1
    .ps1
  • DiagPackage.cat
  • DiagPackage.diagpkg
  • DiagPackage.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MF_WindowsInstaller.ps1
  • MSIMATSFN.ps1
    .ps1
  • RS_MissingPatchCache.ps1
  • RS_RapidProductRemoval.ps1
  • RS_Wow64Detect.ps1
  • TS_MissingPatchCache.ps1
  • TS_RapidProductRemoval.ps1
    .ps1
  • TS_Wow64Detect.ps1
  • VF_RapidProductRemoval.ps1
  • Win8GlobalDetector.ps1
    .ps1
  • Win8Library.ps1
  • Win8RC.RS.ps1
    .ps1
  • Win8RC.TS.ps1
    .ps1
  • Win8RC.VF.ps1
    .ps1
  • ar-sa/ar-sa.cat
  • ar-sa/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ar-sa/strings.psd1
  • bg-bg/bg-bg.cat
  • bg-bg/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • bg-bg/strings.psd1
  • cs-cz/cs-cz.cat
  • cs-cz/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • cs-cz/strings.psd1
  • da-dk/da-dk.cat
  • da-dk/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • da-dk/strings.psd1
  • de-de/de-de.cat
  • de-de/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • de-de/strings.psd1
  • el-gr/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • el-gr/el-gr.cat
  • el-gr/strings.psd1
  • en-us/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • en-us/en-us.cat
  • en-us/strings.psd1
  • es-es/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • es-es/es-es.cat
  • es-es/strings.psd1
  • et-ee/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • et-ee/et-ee.cat
  • et-ee/strings.psd1
  • fi-fi/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • fi-fi/fi-fi.cat
  • fi-fi/strings.psd1
  • fr-fr/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • fr-fr/fr-fr.cat
  • fr-fr/strings.psd1
  • he-il/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • he-il/he-il.cat
  • he-il/strings.psd1
  • hi-in/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • hi-in/hi-in.cat
  • hi-in/strings.psd1
  • hr-hr/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • hr-hr/hr-hr.cat
  • hr-hr/strings.psd1
  • hu-hu/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • hu-hu/hu-hu.cat
  • hu-hu/strings.psd1
  • id-id/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • id-id/id-id.cat
  • id-id/strings.psd1
  • it-it/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • it-it/it-it.cat
  • it-it/strings.psd1
  • ja-jp/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ja-jp/ja-jp.cat
  • ja-jp/strings.psd1
  • ko-kr/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ko-kr/ko-kr.cat
  • ko-kr/strings.psd1
  • lt-lt/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • lt-lt/lt-lt.cat
  • lt-lt/strings.psd1
  • lv-lv/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • lv-lv/lv-lv.cat
  • lv-lv/strings.psd1
  • nb-no/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • nb-no/nb-no.cat
  • nb-no/strings.psd1
  • nl-nl/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • nl-nl/nl-nl.cat
  • nl-nl/strings.psd1
  • pl-pl/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • pl-pl/pl-pl.cat
  • pl-pl/strings.psd1
  • pt-br/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • pt-br/pt-br.cat
  • pt-br/strings.psd1
  • pt-pt/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • pt-pt/pt-pt.cat
  • pt-pt/strings.psd1
  • ro-ro/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ro-ro/ro-ro.cat
  • ro-ro/strings.psd1
  • ru-ru/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ru-ru/ru-ru.cat
  • ru-ru/strings.psd1
  • shim.xml
  • sk-sk/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • sk-sk/sk-sk.cat
  • sk-sk/strings.psd1
  • sl-si/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • sl-si/sl-si.cat
  • sl-si/strings.psd1
  • sr-latn-cs/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • sr-latn-cs/sr-latn-cs.cat
  • sr-latn-cs/strings.psd1
  • sv-se/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • sv-se/strings.psd1
  • sv-se/sv-se.cat
  • th-th/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • th-th/strings.psd1
  • th-th/th-th.cat
  • tr-tr/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • tr-tr/strings.psd1
  • tr-tr/tr-tr.cat
  • uk-ua/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • uk-ua/strings.psd1
  • uk-ua/uk-ua.cat
  • utils_PowerShell_1_0.ps1
    .ps1
  • utils_SdpExtension.ps1
    .ps1
  • utils_SetupEnv.ps1
    .ps1
  • utils_reporting.ps1
    .ps1
  • vi-vn/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • vi-vn/strings.psd1
  • vi-vn/vi-vn.cat
  • zh-cn/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • zh-cn/strings.psd1
  • zh-cn/zh-cn.cat
  • zh-tw/diagpackage.dll.mui
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • zh-tw/strings.psd1
  • zh-tw/zh-tw.cat