General

  • Target

    x64__installer__x32_.zip

  • Size

    32.6MB

  • MD5

    6df2a60d30e5e9ad285a05c55cb7a9a8

  • SHA1

    74c1dba49e6cec92ccc2b90a4fa32d912471edc9

  • SHA256

    911b9aec97b94f9cdd570831ddf33aacd6edb9ba76c5f24d40c139ac8000e801

  • SHA512

    a1b99a515cfd598dcd82c74cabb4257c1f8be9bdde5a944077de9bc65fb7d641acdc22372c96627f5ae678ea3e56cc393e3c97d8e29593da4e1eebc26007c191

  • SSDEEP

    786432:XTiimIgP3tz7/N4EhnP25ugHOM4gi90roTTXqCwv0MVysN5n:+TDPsj4kronXNkbTV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • x64__installer__x32_.zip
    .zip
  • msfeeds/PerceptionDevice.dll
    .dll windows:10 windows x64 arch:x64

    b3347c947e0a334b92c8dfc1552e2b64


    Headers

    Imports

    Exports

    Sections

  • msfeeds/msfeeds.dll
    .dll windows:10 windows x64 arch:x64

    84f3ccddd61f29542a0e95502e8805d7


    Headers

    Imports

    Exports

    Sections

  • msfeeds/ngcpopkeysrv.dll
    .dll windows:10 windows x64 arch:x64

    ac7e98cedc64f1b0a84812a0c2f2fed9


    Headers

    Imports

    Exports

    Sections

  • msfeeds/ortcengine.dll
    .dll windows:6 windows x64 arch:x64

    a6a6ea6adf660ed9ca3bef7aeb4b5e99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msimsg/moshost.dll
    .dll windows:10 windows x64 arch:x64

    1346c9b05496c4f9d25bce40917b0d9a


    Headers

    Imports

    Exports

    Sections

  • msimsg/msimsg.dll
    .dll windows:10 windows x64 arch:x64


    Headers

    Sections

  • msimsg/ndfapi.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2148685ac3a0afc0ffc59e926e418151


    Headers

    Imports

    Exports

    Sections

  • msimsg/pidgenx.dll
    .dll windows:10 windows x64 arch:x64

    72c4d81cbecf328a18637bc1b5e59d31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • provthrd/NcdProp.dll
    .dll windows:10 windows x64 arch:x64

    6b5c6785232d248c1c26cd73dbd5b41f


    Headers

    Imports

    Exports

    Sections

  • provthrd/provthrd.dll
    .dll windows:10 windows x64 arch:x64

    664f98a16e717d758a9217e003bc7587


    Headers

    Imports

    Exports

    Sections

  • provthrd/rometadata.dll
    .dll windows:6 windows x64 arch:x64

    81b3423c662215e9e43760be3f71d693


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • provthrd/spbcd.dll
    .dll windows:10 windows x64 arch:x64

    7a10c0f38dda0ad030a4bdb080f53e59


    Headers

    Imports

    Exports

    Sections

  • setup.msi
    .msi
  • syssetup/ManageCI.dll
    .dll windows:10 windows x64 arch:x64

    07ca456fa695226080885dbb4450deb6


    Headers

    Imports

    Exports

    Sections

  • syssetup/msdtctm.dll
    .dll windows:10 windows x64 arch:x64

    03898f67a5dabafb7b6a9dbc652c2f57


    Headers

    Imports

    Exports

    Sections

  • syssetup/sysntfy.dll
    .dll windows:10 windows x64 arch:x64

    fdc3937f1e8e8a9ffeb8e7949870cfcf


    Headers

    Imports

    Exports

    Sections

  • syssetup/syssetup.dll
    .dll windows:10 windows x64 arch:x64

    fe9aff7b41a154ac9d71ab2967cc3eed


    Headers

    Imports

    Exports

    Sections