General

  • Target

    ExSoftware.zip

  • Size

    13.5MB

  • MD5

    ce815db6903796ebb075ff2545a7230a

  • SHA1

    30e9677b7d66ac30aff441c9dde4b62213a8c8f0

  • SHA256

    0ba8f850d3a339dc5c6c477ae00cc970e3df4c1da1f48d9cbb43083cebaf8747

  • SHA512

    0cc6f7adb2e8c0e917d005340ded1bf3fa4bb0f8754d74b022c22995855fba2b5eab12b473f0e1eb708ea0a2354b286a60203e269a52c4bf115c30c34f3a35c8

  • SSDEEP

    393216:6cgRVGjRJSR+hZ+wkJJR4PYCGMPDEGsMtn94aqHsr3xRC:64q+h8wUJRVCtw+tn9VBxRC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ExSoftware.zip
    .zip

    Password: 2277

  • ExSoftware.rar
    .rar

    Password: 2277

  • ExSoftware/AcXtrnal.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2277

    d5e684c2960f27fa0d1818bb9f6d8d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/IA2Marshal.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    Password: 2277

    1b927de6c53cd665cff68d0a78ca0cc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2277


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2277


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2277


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2277


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86

    Password: 2277


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • ExSoftware/Debug/application.ini
  • ExSoftware/Debug/breakpadinjector.dll
    .dll windows:6 windows x86 arch:x86

    4f2f2d47884b8828285b4cc439c27dad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/crashreporter.ini
  • ExSoftware/Debug/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/defaultagent.ini
  • ExSoftware/Debug/defaultagent_localized.ini
  • ExSoftware/Debug/dependentlibs.list
  • ExSoftware/Debug/freebl3.dll
    .dll windows:6 windows x86 arch:x86

    3d2071c523682b80f8e0be60537dab9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/ipcclientcerts.dll
    .dll windows:6 windows x86 arch:x86

    8d1ec71d97c0abe4edd97b3c1e3bf937


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/lgpllibs.dll
    .dll windows:6 windows x86 arch:x86

    9e8bf5bbbeb672a6b4372f8b4333198c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    e8203db740cd263fa864018590ff59ab


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/libGLESv2.dll
    .dll windows:6 windows x86 arch:x86

    4e8382bfe61a3c6bc00eca6bd4fc14a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/mozwer.dll
    .dll windows:6 windows x86 arch:x86

    a9b59ee3bd7c3dc91561deb095d3d5c8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6dbd7763e94344402d4206b7bab40e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/nss3.dll
    .dll windows:6 windows x86 arch:x86

    91b2deacd206ef373baa926022d03ae2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/nssckbi.dll
    .dll windows:6 windows x86 arch:x86

    50117973ac2c9408e2e047a3f815fc08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/osclientcerts.dll
    .dll windows:6 windows x86 arch:x86

    decddcd2766a73b6ae6cdf25c32847ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Debug/platform.ini
  • ExSoftware/Debug/plugin-container.exe.sig
  • ExSoftware/Debug/precomplete
  • ExSoftware/Debug/qipcap.dll
    .dll windows:6 windows x86 arch:x86

    5b31b900921240852c302205e35ded31


    Code Sign

    Headers

    Imports

    Sections

  • ExSoftware/Debug/removed-files
  • ExSoftware/Debug/softokn3.dll
    .dll windows:6 windows x86 arch:x86

    32ef7516974ac0c43943c0635266c6fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/Set_up.exe
    .exe windows:6 windows x64 arch:x64

    c595f1660e1a3c84f4d9b0761d23cd7a


    Headers

    Imports

    Exports

    Sections

  • ExSoftware/com/COMSupport.dll
    .dll windows:6 windows x64 arch:x64

    a62ef67c837ebd0090dda32d7e5f05ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/com/ColorManagment.dll
    .dll windows:6 windows x64 arch:x64

    e4cf9c253e5f5874540da7a629d56ee7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/com/cpr.dll
    .dll windows:6 windows x64 arch:x64

    a0616db0455c88096b2e68b6527c0373


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/DecoderMgr.dll
    .dll windows:6 windows x64 arch:x64

    cc1849893f079ae74afee604480eea7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/DemuxMgr.dll
    .dll windows:6 windows x64 arch:x64

    87f26c1d93fef1a2d2d9006670d61dca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/alibabacloud-oss-cpp-sdk.dll
    .dll windows:6 windows x64 arch:x64

    7d8de00ef9bfbb837180b559954998f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/cpr.dll
    .dll windows:6 windows x64 arch:x64

    a0616db0455c88096b2e68b6527c0373


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/dav2mp4.dll
    .dll windows:6 windows x64 arch:x64

    0ed2116f15f1cff585ce21874977bc27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/lekeystore.jks
    .dll windows:6 windows x64 arch:x64

    a62ef67c837ebd0090dda32d7e5f05ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/net/FCore.dll
    .dll windows:6 windows x64 arch:x64

    2233eafd2c128f77f07586cd08e95de5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/net/FFAdvancedColorAdjust.dll
    .dll windows:6 windows x64 arch:x64

    05d1f0c4b2dcdf246ec7cdfa8230af96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/net/FFCore.dll
    .dll windows:6 windows x64 arch:x64

    ab1eafc5f5ed48b70c48af688e8e4e2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/net/FFEffectWidgets.dll
    .dll windows:6 windows x64 arch:x64

    f9eecce3c4af55cc40f51f896ac9557a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/data/net/cef_100_percent.pak
    .js
  • ExSoftware/data/net/cef_200_percent.pak
    .js
  • ExSoftware/data/net/cloud-disk.dll
    .dll windows:6 windows x64 arch:x64

    5d0416515448d6a21b447d7b9219d903


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/x32.dll
    .dll windows:6 windows x64 arch:x64

    0f8ba489987e9caa288c632b4b5c3786


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ExSoftware/x64.dll
  • ExSoftware/xNet.dll
    .dll windows:6 windows x64 arch:x64

    ef98e964cdf77bbe8cde3c189b89321e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Password.txt