General

  • Target

    A_Setup_1.0.2.exe

  • Size

    132.0MB

  • MD5

    6920614985b1864b17e7608b1426afea

  • SHA1

    d75dacf4a248b90d0949802b0d0fa35ead3ba289

  • SHA256

    ed496dcd1b3cda40db340d7ae207671061220d8f0533ebce0078c7f59b5886b6

  • SHA512

    f399e65397d74ae8147d9d81f69ea6bade07fd421f43625fa8c2f7036c67a52d8cbbffd7e69fedca1bdfee2c14f599cae45c8ea62fb61c2e02d2c03afce88c38

  • SSDEEP

    3145728:Mfe4azlViDYaCSMfGD9jIDQ2duxzUubBoG2Ywyg9gmwp2ZI/N2:N4GHzSeOI1duFRBp2y3pKGN2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 45 IoCs

    Checks for missing Authenticode signature.

Files

  • A_Setup_1.0.2.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SpiderBanner.dll
    .dll windows:5 windows x86 arch:x86

    90179d905cdca282880541c826651c15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • A.exe
    .exe windows:5 windows x64 arch:x64

    2ca6e285ed5439f02cf1a614871db8b9


    Headers

    Imports

    Exports

    Sections

  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dxcompiler.dll
    .dll windows:5 windows x64 arch:x64

    86379d9f4693f2aa059197611ab2ffc7


    Headers

    Imports

    Exports

    Sections

  • dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app-update.yml
  • resources/app.asar
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/.editorconfig
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/LICENCE.md
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/lib/fs-utils.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/lib/index.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/lib/spawn-promise.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/package.json
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/resources/install-spinner.gif
    .gif
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/template.nuspectemplate
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/7z.dll
    .dll windows:4 windows x64 arch:x64

    bf0f23560274fe8e79ae2e632566ae8c


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/7z.exe
    .exe windows:4 windows x64 arch:x64

    06ccda30750899d24ec1383d46a36e65


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Microsoft.Deployment.Resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Microsoft.Deployment.WindowsInstaller.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Setup.exe
    .exe windows:6 windows x86 arch:x86

    6b4d5c8216d450ee5a7c849b21ee169d


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Squirrel-Mono.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Squirrel.com
    .exe windows:6 windows x86 arch:x86

    460b9647b32f588f71604592baaccdf7


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Squirrel.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/StubExecutable.exe
    .exe windows:6 windows x86 arch:x86

    6b4aa3d8577b072415add0e71c03eef4


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/SyncReleases.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Update-Mono.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Update.com
    .exe windows:6 windows x86 arch:x86

    460b9647b32f588f71604592baaccdf7


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/Update.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/WixNetFxExtension.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/WriteZipToSetup.exe
    .exe windows:6 windows x86 arch:x86

    288560fcad68582dbf0ab140f09770de


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/candle.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/candle.exe.config
    .xml
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/darice.cub
    .msi
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/light.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/light.exe.config
    .xml
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/nuget.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/rcedit.exe
    .exe windows:6 windows x86 arch:x86

    9d28fe83c72991e3dacc9c60a9ca252f


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/signtool.exe
    .exe windows:6 windows x86 arch:x86

    018cef17108f0a49c10d12a42436c93f


    Code Sign

    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/template.wxs
  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/wconsole.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/winterop.dll
    .dll windows:5 windows x86 arch:x86

    2408b50e23d1160bf3c3b2ae9eb308cc


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-forge/node_modules/electron-winstaller/vendor/wix.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-packager/node_modules/rcedit/.releaserc.json
  • resources/app.asar.unpacked/node_modules/electron-packager/node_modules/rcedit/LICENSE
  • resources/app.asar.unpacked/node_modules/electron-packager/node_modules/rcedit/bin/rcedit.exe
    .exe windows:5 windows x86 arch:x86

    f6373a3ff07839e0cf1095730fa9ee53


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-packager/node_modules/rcedit/lib/rcedit.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-packager/node_modules/rcedit/package.json
  • resources/app.asar.unpacked/node_modules/electron-windows-store/.vscode/launch.json
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ElectronInstaller/ElectronInstaller/App.config
    .xml
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ElectronInstaller/ElectronInstaller/Program.cs
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ElectronInstaller/ElectronInstaller/Properties/AssemblyInfo.cs
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ElectronInstaller/ElectronInstaller/atom.ico
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ElectronInstaller/ElectronInstaller/packages.config
  • resources/app.asar.unpacked/node_modules/electron-windows-store/LICENSE
  • resources/app.asar.unpacked/node_modules/electron-windows-store/bin/ElectronInstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/electron-windows-store/bin/windowsstore.js
    .js .sh linux polyglot
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/assets.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/convert.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/deploy.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/dotfile.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/finalsay.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/flatten.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/index.js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/makeappx.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/makepri.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/manifest.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/params.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/setup.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/sign.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/utils.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/vendor/tail.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/lib/zip.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-windows-store/package.json
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ps1/convert.ps1
    .ps1
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ps1/flattennpmmodules.ps1
    .ps1
  • resources/app.asar.unpacked/node_modules/electron-windows-store/ps1/zip.ps1
    .ps1
  • resources/app.asar.unpacked/node_modules/electron-windows-store/template/AppXManifest.xml
    .xml
  • resources/app.asar.unpacked/node_modules/electron-windows-store/template/assets/SampleAppx.150x150.png
    .png
  • resources/app.asar.unpacked/node_modules/electron-windows-store/template/assets/SampleAppx.310x150.png
    .png
  • resources/app.asar.unpacked/node_modules/electron-windows-store/template/assets/SampleAppx.44x44.png
    .png
  • resources/app.asar.unpacked/node_modules/electron-windows-store/template/assets/SampleAppx.50x50.png
    .png
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/LICENSE.md
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/creator.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/index.js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/interfaces.js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/utils/array-to-tree.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/utils/detect-wix.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/utils/replace.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/utils/separator.js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/utils/spawn.js
    .js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/lib/utils/walker.js
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/package.json
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/component-ref.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/component.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/directory.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/property.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/ui-choose-dir.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/ui.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/static/wix.xml
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/tslint.json
  • resources/app.asar.unpacked/node_modules/electron-wix-msi/vendor/signtool.exe
    .exe windows:6 windows x86 arch:x86

    018cef17108f0a49c10d12a42436c93f


    Code Sign

    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/spawn-rx/CODE_OF_CONDUCT.md
  • resources/app.asar.unpacked/node_modules/spawn-rx/COPYING
  • resources/app.asar.unpacked/node_modules/spawn-rx/build.cmd
  • resources/app.asar.unpacked/node_modules/spawn-rx/build.sh
    .sh linux
  • resources/app.asar.unpacked/node_modules/spawn-rx/esdoc.json
  • resources/app.asar.unpacked/node_modules/spawn-rx/lib/src/index.js
    .js
  • resources/app.asar.unpacked/node_modules/spawn-rx/lib/src/index.js.map
  • resources/app.asar.unpacked/node_modules/spawn-rx/package.json
  • resources/app.asar.unpacked/node_modules/spawn-rx/src/index.ts
    .js
  • resources/app.asar.unpacked/node_modules/spawn-rx/tsconfig.json
  • resources/app.asar.unpacked/node_modules/spawn-rx/tslint.json
  • resources/app.asar.unpacked/node_modules/spawn-rx/vendor/jobber/Jobber.exe
    .exe windows:6 windows x86 arch:x86

    87f17b872f9a961f6274e4b83fe61968


    Headers

    Imports

    Sections

  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installerHeaderico.ico
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall A.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • uninstallerIcon.ico