General

  • Target

    38afba1a62ee831a679ed728da8ca167b4c80a432a3ddf575c784bdd29d33975.exe

  • Size

    40.7MB

  • MD5

    9bae70489ffa1fd07797f8964350af30

  • SHA1

    274d484c8de888ba87f3232f451c888e436337b5

  • SHA256

    38afba1a62ee831a679ed728da8ca167b4c80a432a3ddf575c784bdd29d33975

  • SHA512

    fed7c1bc02fba7047a40749ccb4b490f10de960fec66ffdbae612ff32d3d45dba24eeb32fabc6b03ba8a251c0077aace51ce46494b623c8b2adafabb68758080

  • SSDEEP

    786432:DDXX2y7L9rwbfDRqaLpFNuLbT4U4VXpbmAlf2+oEcuQdU8N/IbwUI:DDH2y7h2dqEpFNuLbTh4lpSe++oSor1

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 38afba1a62ee831a679ed728da8ca167b4c80a432a3ddf575c784bdd29d33975.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/EnVar.dll
    .dll windows:5 windows x86 arch:x86

    7a358eff6eca345b20696b23815b7f73


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    85f08eb0cbec010ecbc287fa68321173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    68b7023f8923dd087549802f8fa631c3


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/$PROGRAMFILES/IDmelon/FCP/uninstall.exe.nsis
  • $PROGRAMFILES/IDmelon/FCP/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/FileDeleter.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • $PROGRAMFILES/IDmelon/FCP/IDmelonCredentialProviderFidoAgent.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Code Sign

    Headers

    Imports

    Sections

  • main.pyc
  • $PROGRAMFILES/IDmelon/FCP/IDmelonFcp.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PROGRAMFILES/IDmelon/FCP/Microsoft.Win32.Registry.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/System.Security.AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/System.Security.Principal.Windows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/nssm.exe
    .exe windows:5 windows x64 arch:x64

    486303637bc6ec8cd38f2967cc02503d


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/IDmelon/FCP/vc/vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • $WINDIR/System32/IDmelonV2CredentialProvider.dll
    .dll windows:6 windows x64 arch:x64

    f4475bd58f826aefe7a49e15945cb239


    Code Sign

    Headers

    Imports

    Exports

    Sections