General

  • Target

    BACeyeSetup.exe

  • Size

    73.4MB

  • MD5

    da2a1d009d9b3516e168b858a34fa3ab

  • SHA1

    9f22883eb0909dcb4e42da62b364eb576c98846d

  • SHA256

    1934087948e7c56954803942c7d347d6ab49b806c24e49e800c462a79c37283a

  • SHA512

    4bf03352aafc38b64f5f6566533cfec1596b1af980bb47fb9ca83170becdcce57af5562fec45a11d3de9c29552dc84e27e7052555dff23ec81d994c6474b8c66

  • SSDEEP

    1572864:LAVBjIQSzQe3cf7xOCHKYrLn+XxdjrALIjOqWY99Ml8YEfI3s:MVBIbzQe3u7KYrCDS9299MYfQs

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • BACeyeSetup.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Error.bmp
  • $PLUGINSDIR/ExecDos.dll
    .dll windows:5 windows x86 arch:x86

    b997a221e444f5e6463b28778735cf2b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartPage.bmp
  • $PLUGINSDIR/Success.bmp
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Warning.bmp
  • $PLUGINSDIR/WinPcap_4_1_3.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bootOptions.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/Packet.dll
    .dll windows:4 windows x86 arch:x86

    19fa7010cacd16ef346ea8bbc2e8b999


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/pthreadVC.dll
    .dll windows:4 windows x86 arch:x86

    90ee61357770484e2d085958b94141a3


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/wpcap.dll
    .dll windows:4 windows x86 arch:x86

    10dce091d63eed72dc0010ebc8838f6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinPcapInstall.dll
    .dll windows:4 windows x86 arch:x86

    ad1fff2efc5a1aa2884d5c780a51aa99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rpcapd.exe
    .exe windows:4 windows x86 arch:x86

    2b9e73ff502840fe6b381682c42d43cf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/dotNetFx40_Full_x86_x64.exe
    .exe windows:5 windows x86 arch:x86

    02483cd76378259a50b7b66146b45f06


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/haspdinst.exe
    .exe windows:4 windows x86 arch:x86

    6f01705f215f9153b019ad593940ef57


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    a1f6f100bff4507a3332f3f0cdfc24f5


    Code Sign

    Headers

    Imports

    Sections

  • AKSHLock.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bf1e0d5e4bbf7677adcd9eb943982fbb


    Headers

    Imports

    Exports

    Sections

  • BACeye.Plugin.Interface.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BACeye.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • BACeye.exe.config
  • BACnetBaseLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • BACnetObjectLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CSLabTools.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • CliBACnetWrapper.dll
    .dll windows:5 windows x86 arch:x86

    04c412c849c91a2ba65696e4c081a8e0


    Code Sign

    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MBSDynamicResources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PacketDotNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PacketDotNet.xml
    .xml
  • ProjectFiles/DefaultProject.xml
    .xml
  • SharpPcap.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharpPcap.xml
    .xml
  • SharpSvn-DB44-20-Win32.dll
    .dll windows:5 windows x86 arch:x86

    ed4b35f4ff5beafd08f17fa0d213e326


    Headers

    Imports

    Exports

    Sections

  • SharpSvn-SASL21-23-Win32.dll
    .dll windows:5 windows x86 arch:x86

    6660a3fdaa4f1ff5d506b634f482794c


    Headers

    Imports

    Exports

    Sections

  • SharpSvn.dll
    .dll windows:5 windows x86 arch:x86

    1957260b2b98ae318893539cad0e4a69


    Headers

    Imports

    Sections

  • SharpSvn.xml
    .xml
  • System.Windows.Controls.DataVisualization.Toolkit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WPFToolkit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • WebUpdater.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • XMLSchema/BACeye.plugin.xsd
  • XMLSchema/ProgramData.plugin.xsd
  • Xceed.Wpf.Toolkit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • de/BACeye.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • de/MBSDynamicResources.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • de/WebUpdater.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • msvcr70.dll
    .dll windows:4 windows x86 arch:x86

    1042bb30696d4426da7447f341f51a6e


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis