General

  • Target

    Setup.exe

  • Size

    8.0MB

  • MD5

    bffa63c509f84956b20afbbf80d762ec

  • SHA1

    568ddb8cc2038e21da8cc42ea2f08fb73be1cf04

  • SHA256

    a18fb5ee523e9e8894fb9075b5fa0781f40140a6bf4605feb081c5de008b337c

  • SHA512

    7e2654578c505c82749bea45ab7eb886d64c12be24bd0a85075b84193163b35ce359a996e17d1d4759e7cb7a2e51698305d08139f7700182ad260313e416d268

  • SSDEEP

    196608:ks+3O2wEz2tMEj18+VDVVrO/IPiCC8fv6q6u1keN1i:4chO/I48fv3Zw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    a46ac714274c7f150eaa703de6d7fb57


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:5 windows x86 arch:x86

    1b37562e8104552588ae892e11fcdff2


    Headers

    Imports

    Exports

    Sections

  • libvlc.dll
    .dll windows:4 windows x86 arch:x86

    5c455bebc40d8ab001d42875154b8ef8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libvlccore.dll
    .dll windows:4 windows x86 arch:x86

    f11716690dc3b1ac312b344caaf28102


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/Microsoft.VisualStudio.VsWebProtocol
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • plugins/NvStWiz
    .exe windows:6 windows x86 arch:x86

    a7e73ef2207e9ee97c678506145e1258


    Code Sign

    Headers

    Imports

    Sections

  • plugins/StartupHelper
    .exe windows:5 windows x86 arch:x86

    d21794f0d47bb5c7f5977a6500854d85


    Code Sign

    Headers

    Imports

    Sections

  • plugins/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • plugins/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • wastrel.zip
    .zip
  • IMHttpComm.dll
    .dll windows:4 windows x86 arch:x86

    aba56a0f7290ac5134384764b9d92e60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImLc.exe
    .exe windows:4 windows x86 arch:x86

    24d38ae564b0163b39f0bdcb4269b03f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImLookExU.dll
    .dll windows:4 windows x86 arch:x86

    14347c7fffee889c42c4c06be0e3d25d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImLookU.dll
    .dll windows:4 windows x86 arch:x86

    1733b83cdf3fb5b054b258047bf2aaaf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImNtUtilU.dll
    .dll windows:4 windows x86 arch:x86

    ef30e239f7115e423d9c3762300d51fe


    Code Sign

    Headers

    Imports

    Sections

  • ImUtilsU.dll
    .dll windows:4 windows x86 arch:x86

    d5653a4bfda719bffeba69a4f5d86bc8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ImWrappU.dll
    .dll windows:4 windows x86 arch:x86

    287b69957bb146b544ac10550435a913


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC80.CRT.manifest
  • Microsoft.VC80.MFC.manifest
  • SftTree_IX86_U_60.dll
    .dll windows:4 windows x86 arch:x86

    dc5b8b306de44dcf78b82c94946f3bf7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cateran.docx
  • mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    45cba60d0833bef75d882d15b2d5a2cd


    Headers

    Imports

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Headers

    Imports

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • wastrel.msg
  • wlessfp1.dll
    .dll windows:4 windows x86 arch:x86

    27546f66548d6eaef1e89e2953982807


    Code Sign

    Headers

    Imports

    Exports

    Sections