Resubmissions

10-07-2024 10:57

240710-m2mqxatepj 7

10-07-2024 10:47

240710-mvhtdavgre 7

General

  • Target

    SkrinshoterSetup_v3.11.4.30.exe

  • Size

    3.4MB

  • MD5

    061ba6da7357850ca194496766009f59

  • SHA1

    b31cdf2c231212c3c76c1e2616c1d04f44d89118

  • SHA256

    60c4175e18abf22d705d855abb6f16e08b80b9fb829a08589b9e4ba750c47349

  • SHA512

    8607833b8c8653545fdca0cd9011fff642622e98afb6e91503aa8a7534ff222b6821088d4e553babdb50b132d1aa42517033e584251816a574bd575ee18bccaa

  • SSDEEP

    98304:njGHuYqJ/x+OJQgQyiN5dvdlqNLOFCuAC4R/z5xQgJ:nKHuYMfYyiRvgL1uZa/z5rJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • SkrinshoterSetup_v3.11.4.30.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IpConfig.dll
    .dll windows:5 windows x86 arch:x86

    3f0fda09180f619ca116344bede41608


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LauncherSRF.exe
    .exe windows:6 windows x86 arch:x86

    fb0af905d0c79fa370313ef406f638ef


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloader.exe
    .exe windows:5 windows x86 arch:x86

    a05d88650e5594db2afe874ec2674b55


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/finishpage.ini
  • $PLUGINSDIR/logo_Yandex_RU_UA_vertical.ico
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsResize.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsRestartExplorer.dll
    .dll windows:4 windows x86 arch:x86

    d6719bb4e8912e74348d8eaee2b0ef24


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    421a02aae559045e04759aae146087eb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/skrinshoter.rf.logo.ico
  • $PLUGINSDIR/yandexbarpage2.ini
  • $PLUGINSDIR/yandexbrowsersetup.ico
  • LauncherSRF.exe
    .exe windows:6 windows x86 arch:x86

    fb0af905d0c79fa370313ef406f638ef


    Code Sign

    Headers

    Imports

    Sections

  • SimpleExt.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    a5fb3f7826f9b9f32f42ebaf7b9c7073


    Headers

    Imports

    Exports

    Sections

  • SimpleExt64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    4ff023f0981e157f9befe0fe6f6cca62


    Headers

    Imports

    Exports

    Sections

  • Skrinshoter.exe
    .exe windows:6 windows x86 arch:x86

    d716ca5686ff39d82ca25013ab69987a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • curl.exe
    .exe windows:4 windows x86 arch:x86

    117f4ebfd4187505725a1102827ae12a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • downloader.exe
    .exe windows:5 windows x86 arch:x86

    a05d88650e5594db2afe874ec2674b55


    Code Sign

    Headers

    Imports

    Sections

  • graphin.dll
    .dll windows:4 windows x86 arch:x86

    40d8717b55914d36d19a2428aba2a926


    Headers

    Imports

    Exports

    Sections

  • logo_Yandex_RU_UA_vertical.ico
  • skrinshoter.rf.ico
  • skrinshoter.rf.logo.ico
  • yandexbrowsersetup.ico
  • Удаление (Uninstall).exe.nsis