General

  • Target

    dexpot_1614_r2439.exe

  • Size

    4.7MB

  • MD5

    0514d6e01cd7d4eaa10e853a67464345

  • SHA1

    74787a610883fdcd4d9d49f1a6fa353c4a8e48e1

  • SHA256

    1b87a1c31d721708a679673f098a73f77d01b9e5c5ab18709eac388746e6f46a

  • SHA512

    60e641bcffc94879cb04c6aa9d7f1e6fa58660cfd6ae4876becd3e328a7c738c3355d705b5bc70c0fd6f36c98f73261afda7512e278940aa95bf1d18bdfaa827

  • SSDEEP

    98304:Kr+079pnsr8sdx4rlp9qGvRtK56+OVCXOmPnaOoIcQvLThoc0zy:Kp7Ls9H0lHqG+6BsXPaOoULThQy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • dexpot_1614_r2439.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    4e5f0ae8071ae04cdb537283701198ff


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    2274cc1534607459cdd304a928601ef9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dexpot.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    f03b2bab186574d8892d3d73fa9fd3fd


    Headers

    Imports

    Exports

    Sections

  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    fe3e00b55ce38538da3f709132445d8e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $R2/NSIS.Library.RegTool.v3.$_56_.exe
    .exe windows:4 windows x86 arch:x86

    d16ab3022432d93d45fa93eaa0c2bbd3


    Headers

    Imports

    Sections

  • Dexpot.dll
    .dll windows:5 windows x86 arch:x86

    44b45dd7d9a8121f3db992d0eb6bd81c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dexpot64.dll
    .dll windows:5 windows x64 arch:x64

    ef2d65e112946c8548a808e96ed46b4e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dexpot64.exe
    .exe windows:5 windows x64 arch:x64

    eddf58a533bc1aba7e9b353eef976e4a


    Code Sign

    Headers

    Imports

    Sections

  • autodex.exe
    .exe windows:5 windows x86 arch:x86

    5cfb68175cfd765d9da47edc5facd34a


    Code Sign

    Headers

    Imports

    Sections

  • dexpot.exe
    .exe windows:4 windows x86 arch:x86

    bcedfe584a911a02f77f6dd7158e8cca


    Code Sign

    Headers

    Imports

    Sections

  • hooxpot.dll
    .dll windows:5 windows x86 arch:x86

    32f0b0f6180e04f409479493840c41af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hooxpot64.dll
    .dll windows:5 windows x64 arch:x64

    8f70c7d5dbce8946e3773a48f7d89108


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • icons/Classic/d1.ico
  • icons/Classic/d10.ico
  • icons/Classic/d10a.ico
  • icons/Classic/d11.ico
  • icons/Classic/d11a.ico
  • icons/Classic/d12.ico
  • icons/Classic/d12a.ico
  • icons/Classic/d13.ico
  • icons/Classic/d13a.ico
  • icons/Classic/d14.ico
  • icons/Classic/d14a.ico
  • icons/Classic/d15.ico
  • icons/Classic/d15a.ico
  • icons/Classic/d16.ico
  • icons/Classic/d16a.ico
  • icons/Classic/d17.ico
  • icons/Classic/d17a.ico
  • icons/Classic/d18.ico
  • icons/Classic/d18a.ico
  • icons/Classic/d19.ico
  • icons/Classic/d19a.ico
  • icons/Classic/d1a.ico
  • icons/Classic/d2.ico
  • icons/Classic/d20.ico
  • icons/Classic/d20a.ico
  • icons/Classic/d2a.ico
  • icons/Classic/d3.ico
  • icons/Classic/d3a.ico
  • icons/Classic/d4.ico
  • icons/Classic/d4a.ico
  • icons/Classic/d5.ico
  • icons/Classic/d5a.ico
  • icons/Classic/d6.ico
  • icons/Classic/d6a.ico
  • icons/Classic/d7.ico
  • icons/Classic/d7a.ico
  • icons/Classic/d8.ico
  • icons/Classic/d8a.ico
  • icons/Classic/d9.ico
  • icons/Classic/d9a.ico
  • icons/Classic/next.ico
  • icons/Classic/prev.ico
  • icons/New Blue/d1.ico
  • icons/New Blue/d10.ico
  • icons/New Blue/d10a.ico
  • icons/New Blue/d11.ico
  • icons/New Blue/d11a.ico
  • icons/New Blue/d12.ico
  • icons/New Blue/d12a.ico
  • icons/New Blue/d13.ico
  • icons/New Blue/d13a.ico
  • icons/New Blue/d14.ico
  • icons/New Blue/d14a.ico
  • icons/New Blue/d15.ico
  • icons/New Blue/d15a.ico
  • icons/New Blue/d16.ico
  • icons/New Blue/d16a.ico
  • icons/New Blue/d17.ico
  • icons/New Blue/d17a.ico
  • icons/New Blue/d18.ico
  • icons/New Blue/d18a.ico
  • icons/New Blue/d19.ico
  • icons/New Blue/d19a.ico
  • icons/New Blue/d1a.ico
  • icons/New Blue/d2.ico
  • icons/New Blue/d20.ico
  • icons/New Blue/d20a.ico
  • icons/New Blue/d2a.ico
  • icons/New Blue/d3.ico
  • icons/New Blue/d3a.ico
  • icons/New Blue/d4.ico
  • icons/New Blue/d4a.ico
  • icons/New Blue/d5.ico
  • icons/New Blue/d5a.ico
  • icons/New Blue/d6.ico
  • icons/New Blue/d6a.ico
  • icons/New Blue/d7.ico
  • icons/New Blue/d7a.ico
  • icons/New Blue/d8.ico
  • icons/New Blue/d8a.ico
  • icons/New Blue/d9.ico
  • icons/New Blue/d9a.ico
  • icons/New Blue/next.ico
  • icons/New Blue/prev.ico
  • license.txt
  • licensepro.txt
  • lizenz.txt
  • lizenzpro.txt
  • plugins/DexControl.exe
    .exe windows:5 windows x86 arch:x86

    c1c366217b3051a35baaa2ca9e871238


    Code Sign

    Headers

    Imports

    Sections

  • plugins/DexControl.ini
  • plugins/Dexcube.exe
    .exe windows:5 windows x86 arch:x86

    8c6d72a881adad911b5683612601fae9


    Code Sign

    Headers

    Imports

    Sections

  • plugins/Dexcube.ini
  • plugins/Dexgrid.exe
    .exe windows:5 windows x86 arch:x86

    8d8a2a551986403955cc622830c12c84


    Code Sign

    Headers

    Imports

    Sections

  • plugins/Dexgrid.ini
  • plugins/Leap.dll
    .dll windows:5 windows x86 arch:x86

    49cb3d3ef348fe64f50458083bd80462


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/MouseEvents.exe
    .exe windows:5 windows x86 arch:x86

    d330e1cc82f938f18f3bf3e9316e4e6a


    Code Sign

    Headers

    Imports

    Sections

  • plugins/MouseEvents.ini
  • plugins/SevenDex.exe
    .exe windows:5 windows x86 arch:x86

    35308e8c9afde8b9fcb4409dac3fcd72


    Code Sign

    Headers

    Imports

    Sections

  • plugins/SevenDex.ini
  • plugins/Slideshow.exe
    .exe windows:4 windows x86 arch:x86

    90adf7423b511c00ad1e16e8710bedc5


    Code Sign

    Headers

    Imports

    Sections

  • plugins/Slideshow.ini
  • plugins/Taskbar Pager.exe
    .exe windows:5 windows x86 arch:x86

    a04708e40f981b51bece123a011c84b6


    Code Sign

    Headers

    Imports

    Sections

  • plugins/Taskbar Pager.ini
  • plugins/Wallpaper Clock.exe
    .exe windows:4 windows x86 arch:x86

    a63a6dbf71b416da2e76152bda49be86


    Code Sign

    Headers

    Imports

    Sections

  • plugins/Wallpaper Clock.ini
  • plugins/d3dx9_43.dll
    .dll windows:6 windows x86 arch:x86

    5fb75b2a87c1fa7cc3d7904a0b97084a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/dexcube/DexcubeConfig.exe
    .exe windows:4 windows x86 arch:x86

    d201c362e16b847d52f2f17bc27370b6


    Code Sign

    Headers

    Imports

    Sections

  • plugins/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/zlibwapi.dll
    .dll windows:5 windows x86 arch:x86

    b070f394134929dd5353cb9140a1caaf


    Headers

    Imports

    Exports

    Sections

  • regeldb.dxr
  • sprache/chinesesimp.dxs
  • sprache/chinesetrad.dxs
  • sprache/czech.dxs
  • sprache/deutsch.dxs
  • sprache/english.dxs
  • sprache/espanol.dxs
  • sprache/farsi.dxs
  • sprache/francais.dxs
  • sprache/greek.dxs
  • sprache/hungarian.dxs
  • sprache/italiano.dxs
  • sprache/korean.dxs
  • sprache/nederlands.dxs
  • sprache/norwegian.dxs
  • sprache/polski.dxs
  • sprache/portuguese.dxs
  • sprache/russian.dxs
  • sprache/schweizerdeutsch.dxs
  • sprache/serbian_cyr.dxs
  • sprache/serbian_lat.dxs
  • sprache/slovak.dxs
  • sprache/suomi.dxs
  • sprache/svenska.dxs
  • sprache/turkish.dxs
  • sprache/ukrainian.dxs
  • uninstall.exe.nsis
  • updexer.exe
    .exe windows:4 windows x86 arch:x86

    b7b12a34159b0524a0c5e7945fd95c42


    Code Sign

    Headers

    Imports

    Sections

  • wechsel.ini
  • zlibwapi.dll
    .dll windows:5 windows x86 arch:x86

    b070f394134929dd5353cb9140a1caaf


    Headers

    Imports

    Exports

    Sections