General

  • Target

    f012b7c36b48dc396c6434096e153a32e13e99aea21812f54ffd5e8b60cd98bc

  • Size

    10.5MB

  • MD5

    dc84ca6230c790dc7855eb006d93655d

  • SHA1

    d3e1e7a303458f7a91ee89cc3a88decd6681b712

  • SHA256

    f012b7c36b48dc396c6434096e153a32e13e99aea21812f54ffd5e8b60cd98bc

  • SHA512

    b458a84f0de4241c2926e0a2637e8f8f4cc09140e58e082de3e7bc447b76b7b13596e7166cc78288b0372ec5109ed4c041f4233238cbefbeb806490a1bc7b31b

  • SSDEEP

    196608:iGsT5GbKnFfQeN9kAUeQSFufw2MUDofKaSKWgHNnA400++XaB0WgHTZ:fvW5H9kbQB2MUDX/q2J0+H0tZ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • f012b7c36b48dc396c6434096e153a32e13e99aea21812f54ffd5e8b60cd98bc
    .zip
  • ConnectifyInstaller_cn_.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Slides/Slides.dat
  • $PLUGINSDIR/Slides/gdpr2_en.bmp
  • $PLUGINSDIR/Slides/installer1.png
    .png
  • $PLUGINSDIR/Slides/installer1_hr.png
    .png
  • $PLUGINSDIR/Slides/installer2.png
    .png
  • $PLUGINSDIR/Slides/installer2_hr.png
    .png
  • $PLUGINSDIR/Slides/installer3.png
    .png
  • $PLUGINSDIR/Slides/installer3_hr.png
    .png
  • $PLUGINSDIR/Slides/installer4.png
    .png
  • $PLUGINSDIR/Slides/installer4_hr.png
    .png
  • $PLUGINSDIR/Slides/installer5.png
    .png
  • $PLUGINSDIR/Slides/installer5_hr.png
    .png
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/gdpr2_en.bmp
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisSlideshow.dll
    .dll windows:4 windows x86 arch:x86

    8fc94f48a46bd006f33973e3914c7eb1


    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/Connectify.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/Connectify.exe.config
    .xml
  • $TEMP/Connectify/$_13_/ConnectifyGopher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyGopher.exe.config
  • $TEMP/Connectify/$_13_/ConnectifyNetServices.exe
    .exe windows:6 windows x86 arch:x86

    216004f63bdaf12584f402909f532396


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyPublic.cer
  • $TEMP/Connectify/$_13_/ConnectifyService.exe
    .exe windows:6 windows x86 arch:x86

    abace7b9bbac02134f97ff2d955852f2


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyShutdown.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyStartup.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifyStartup.exe.config
  • $TEMP/Connectify/$_13_/ConnectifySupportCenter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/ConnectifySupportCenter.exe.config
    .xml
  • $TEMP/Connectify/$_13_/Connectifyd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/Connectifyd.exe.config
    .xml
  • $TEMP/Connectify/$_13_/Credits.html
    .html .js polyglot
  • $TEMP/Connectify/$_13_/DriverSwitcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/DriverSwitcher.exe.config
    .xml
  • $TEMP/Connectify/$_13_/EmojiControls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/GetFileVersion.exe
    .exe windows:6 windows x86 arch:x86

    ce61c6d17f67fe52a8ac451f304ef60d


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/GlobalAtomTable.exe
    .exe windows:6 windows x86 arch:x86

    ce5bb7e7911d09eebe6a70513da7e29f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/HardwareHelperLib.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/LibHotspot.dll
    .dll windows:6 windows x86 arch:x86

    cf155d1de00fabef0eb1cbf53e7636e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/Notification.png
    .png
  • $TEMP/Connectify/$_13_/OneAPNative.dll
    .dll windows:6 windows x86 arch:x86

    9110d4c8a42ec575dbfbf2570d500aab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/adhosts.txt
  • $TEMP/Connectify/$_13_/appscreens/activateError.html
    .html .js polyglot
  • $TEMP/Connectify/$_13_/appscreens/connectify.png
    .png
  • $TEMP/Connectify/$_13_/appscreens/style.css
  • $TEMP/Connectify/$_13_/connectify_cli.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/connectify_cli.exe.config
  • $TEMP/Connectify/$_13_/connectifynat.l4c
  • $TEMP/Connectify/$_13_/fonts/OpenSans-Bold.ttf
  • $TEMP/Connectify/$_13_/fonts/OpenSans-Regular.ttf
  • $TEMP/Connectify/$_13_/languages/ar/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/de/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/es/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/fr/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/pt/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/qps-ploc/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/qps-plocm/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/ro/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/ru/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/tr/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/languages/zh-CN/LibTongue.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/Connectify/$_13_/log4cplus.dll
    .dll windows:6 windows x86 arch:x86

    3dd3ad3326935063c7ae8a3784b42eab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/Connectify/$_13_/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe.nsis
  • __MACOSX/._ConnectifyInstaller_cn_.exe