General

  • Target

    TeamViewer_Host_Setup_x64.exe

  • Size

    34.1MB

  • MD5

    7f037611cd637cdb107b05244aaa2236

  • SHA1

    a243f69fb23b3066cf493f00323ab359903223e9

  • SHA256

    dcdfcdc1de6a75538b302d12fb637c36c42940b8f2ab885777d8ad2ef13d52f9

  • SHA512

    4cddb9a813335f19827c687b8a603b609ccd60cf77c9402fe1c7272f7c85bfa4057ed6156a82a833c18a2aeb2db2cd243a2267228f158caead0f8fa3d5694803

  • SSDEEP

    786432:uqMb1i2aEd6+WVBdS1dNxcsfF4BIk7xgYmiKrvVtVe:Nq1iJEd6+WVHSvvcs9uKrrVe

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • TeamViewer_Host_Setup_x64.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    ad07268da82afb689855dbfe2dd9f0d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:6 windows x86 arch:x86

    cedecec5529a0c354fe4bf9594d4b2b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/environment_unicode.ini
  • $PLUGINSDIR/finish_unicode.ini
  • $PLUGINSDIR/hoststart_unicode.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:4 windows x86 arch:x86

    9c8bb65ecbb91da1f2ebb6ae7a714ed0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/vpn_unicode.ini
  • $PLUGINSDIR/wincheck.ini
  • tvfiles.7z
    .7z
  • CopyrightHOST.txt
  • TVWebRTC.dll
    .dll windows:6 windows x64 arch:x64

    73f45d8e92f923e3e4952ceb434c98a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TeamViewer.exe
    .exe windows:6 windows x64 arch:x64

    855ed8b387668d57c7e4c9a8eab3d432


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Desktop.exe
    .exe windows:6 windows x64 arch:x64

    8a53bfe8b7610b77ef6b16975a8c0fc1


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Note.exe
    .exe windows:6 windows x64 arch:x64

    57f57b7dcd1cb390479abab200f316ab


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_Resource_ar.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_bg.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_cs.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_da.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_de.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_el.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_en.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_es.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_fi.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_fr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_he.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_hr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_hu.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_id.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_it.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ja.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ko.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_lt.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_nl.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_no.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_pl.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_pt.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ro.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_ru.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_sk.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_sr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_sv.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_th.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_tr.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_uk.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_vi.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_zhCN.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Resource_zhTW.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • TeamViewer_Service.exe
    .exe windows:6 windows x64 arch:x64

    ffe4407cb572254f17a2f249aff7b4c9


    Code Sign

    Headers

    Imports

    Sections

  • TeamViewer_StaticRes.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • WriteDump.exe
    .exe windows:6 windows x64 arch:x64

    26e910104b12a62ee1b84b8ad4e642ff


    Code Sign

    Headers

    Imports

    Sections

  • tv_w32.dll
    .dll windows:6 windows x86 arch:x86

    9fc402ae80a7f45b4feb77ea362ccd65


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_w32.exe
    .exe windows:6 windows x86 arch:x86

    aeb1dc068062a161cecbf22328569560


    Code Sign

    Headers

    Imports

    Sections

  • tv_x64.dll
    .dll windows:6 windows x64 arch:x64

    2652a6150ac374b9e59fe670b0629aea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tv_x64.exe
    .exe windows:6 windows x64 arch:x64

    49b9576f7fb9fea3bd19612d438b2abb


    Code Sign

    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    1dd17c8be9b0761e58bbdf6fc06463e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/TvGetVersion.dll
    .dll windows:6 windows x86 arch:x86

    cedecec5529a0c354fe4bf9594d4b2b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2a2e0e82c0dc9890f9201e8bd8ecbff2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsArray.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uninstall_unicode.ini
  • tvfiles_printer_WithPDFSupport_x64.7z
    .7z
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
  • Printer/TeamViewer_XPSDriverFilter.gpd
  • Printer/TeamViewer_XPSDriverFilter.inf
  • Printer/teamviewer_xpsdriverfilter.cat
  • Printer/x64/TeamViewer_XPSDriverFilter.dll
    .dll windows:6 windows x64 arch:x64

    618b6ab8f3cd7759b0577feaa0d9b395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tvfiles_printer_WithoutPDFSupport_x64.7z
    .7z
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
  • Printer/TeamViewer_XPSDriverFilter.gpd
  • Printer/TeamViewer_XPSDriverFilter.inf
  • Printer/teamviewer_xpsdriverfilter.cat
  • Printer/x64/TeamViewer_XPSDriverFilter.dll
    .dll windows:6 windows x64 arch:x64

    618b6ab8f3cd7759b0577feaa0d9b395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tvfiles_printer_WithoutPDFSupport_x86.7z
    .7z
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
  • Printer/TeamViewer_XPSDriverFilter.gpd
  • Printer/TeamViewer_XPSDriverFilter.inf
  • Printer/teamviewer_xpsdriverfilter.cat
  • Printer/x86/TeamViewer_XPSDriverFilter.dll
    .dll windows:6 windows x86 arch:x86

    b4c7fd5e0b259aa132a0b210079572a9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tvfilesx64.7z
    .7z
  • x64/TVMonitor.inf
  • x64/TVMonitor.sy_
    .sys windows:6 windows x64 arch:x64

    bd2fee8a544a1c6656edb847a80a08c5


    Code Sign

    Headers

    Imports

    Sections

  • x64/TVVirtualMonitorDriver.cat
  • x64/TVVirtualMonitorDriver.dll
    .dll windows:10 windows x64 arch:x64

    6229796e049a313067ae1156761005da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/TVVirtualMonitorDriver.inf
  • x64/TeamViewerVPN.inf
  • x64/TeamViewer_VirtualDeviceDriver.cat
  • x64/TeamViewer_VirtualDeviceDriver.dll
    .dll windows:10 windows x64 arch:x64

    135c353c83e08e43c5d24d4d73077564


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • x64/TeamViewer_VirtualDeviceDriver.inf
  • x64/VPN_Win7/TeamViewerVPN.inf
  • x64/VPN_Win7/teamviewervpn.cat
  • x64/VPN_Win7/teamviewervpn.sy_
    .sys windows:6 windows x64 arch:x64

    cd6e6e3dfb3a87a73c76cb5d3cdda140


    Code Sign

    Headers

    Imports

    Sections

  • x64/teamviewervpn.cat
  • x64/teamviewervpn.sy_
    .sys windows:10 windows x64 arch:x64

    6951888e15c9a7d15f304320298d1328


    Code Sign

    Headers

    Imports

    Sections

  • x64/tvmonitor.cat
  • tvfilesx86.7z
    .7z