General

  • Target

    Install_Xfer_SerumFX_133b4.exe

  • Size

    8.8MB

  • MD5

    6a46bdfbc77d06dc7a48989288cda5a4

  • SHA1

    d81243b9fd434040113fd7e92187dd9075aa1af9

  • SHA256

    45ad970a837e236ded3282a8c6f6b1c473244bf6b6e6e9aacbd7c5159dcaf1bf

  • SHA512

    41342692b24f1d645b5a9b7c0b2d61729a6847461179be90a864d54589bc2bc5efc2944f0316279b472de1378951c4ce1fa2697b9cae68d500a83006a7450505

  • SSDEEP

    196608:AtS1BPZefrysCVU5z89jJLHAxXV8ixnBBm6NKCbZ97zNzdeGae:A81tyrxzClLH4l8MwCbZ97zKo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • Install_Xfer_SerumFX_133b4.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/advsplash.dll
    .dll windows:4 windows x86 arch:x86

    4d85954a016da6eba41af38db29369a8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp
  • $_13_/SerumFX_x64.dll
    .dll windows:6 windows x64 arch:x64

    45e9fcaf0805196e89809cb454b87c70


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    0ac8d2188e6a4799e70552c6f5e458bc


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    9967b7dde5c7b3bc3332e17c9b3991a3


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/Win32/SerumFX.aaxplugin
    .dll windows:6 windows x86 arch:x86

    0ac8d2188e6a4799e70552c6f5e458bc


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/Contents/x64/SerumFX.aaxplugin
    .dll windows:6 windows x64 arch:x64

    9967b7dde5c7b3bc3332e17c9b3991a3


    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/PlugIn.ico
  • C:/Program Files/Common Files/Avid/Audio/Plug-Ins/SerumFX.aaxplugin/desktop.ini
  • SerumFX.dll
    .dll windows:6 windows x86 arch:x86

    69fee0652ac023de4482f5fde9e7ad5a


    Headers

    Imports

    Exports

    Sections