General

  • Target

    AutokromaAfterCodecsv1.10.15.x64.k.taiwebs.com.zip

  • Size

    28.0MB

  • MD5

    37becbc0cda88860ded5403e1a790037

  • SHA1

    6ccbeb2343f9b0b4e3f2714b86a5a8435511842d

  • SHA256

    fb91b2fcd4328cb17fd8a00897cf9291736a85af6c54326539b851381463256d

  • SHA512

    5aa1d37d399de44a9f024e753ea0df9e816057d12fdaa9c2c499bf161c958964f148c23ceab61c0fe7275503ceb0485241c4a0ae8fdfe5f3215ccb1591007673

  • SSDEEP

    393216:q0ryi3njJxIPWCsXKNVzd+S3zzMWts8HXUfLGzQSKczMVwD6fca7kU2cl:q0jIsXKNVzJHMWVkfCRz5efcLE

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • AutokromaAfterCodecsv1.10.15.x64.k.taiwebs.com.zip
    .zip

    Password: taiwebs.com

  • Autokroma AfterCodecs v1.10.15 (x64)/AfterCodecs v1.10.15 Installer.exe
    .exe windows:4 windows x86 arch:x86

    Password: taiwebs.com

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • $APPDATA/Autokroma/Autokroma.ico
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: taiwebs.com

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: taiwebs.com

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsResize.dll
    .dll windows:6 windows x86 arch:x86

    Password: taiwebs.com


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/CSXS/manifest.xml
    .xml
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/META-INF/signatures.xml
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/css/styles.css
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/css/topcoat-desktop-dark.css
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/index.html
    .html .js polyglot
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/js/themeManager.js
    .js
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/jsx/extendScript.jsx
    .js
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/lib/CSInterface.js
    .js
  • $PROGRAMFILES/Common Files/Adobe/CEP/extensions/com.autokroma.afcpanel/mimetype
  • $TEMP/dll_not_found_error_means_you_need_to_install_vcredist.exe
    .exe windows:6 windows x64 arch:x64

    Password: taiwebs.com

    959754d23cd7c366f8efc45e6a194a7d


    Headers

    Imports

    Sections

  • C:/Program Files/Adobe/Common/Plug-ins/7.0/MediaCore/Autokroma AfterCodecs/AfterCodecs.exe
    .exe windows:6 windows x64 arch:x64

    Password: taiwebs.com

    176c57d90ff4ca99bb4470ef511e09a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Adobe/Common/Plug-ins/7.0/MediaCore/Autokroma AfterCodecs/AfterCodecsAE.aex
    .dll windows:6 windows x64 arch:x64

    Password: taiwebs.com

    adffeadd2ac857b6c7e409f4679204b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Adobe/Common/Plug-ins/7.0/MediaCore/Autokroma AfterCodecs/AfterCodecsPPME.prm
    .dll windows:6 windows x64 arch:x64

    Password: taiwebs.com

    99ab2eb258b664d21d634fa5ed1e71a3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • C:/Program Files/Adobe/Common/Plug-ins/7.0/MediaCore/Autokroma AfterCodecs/ffkroma.exe
    .exe windows:6 windows x64 arch:x64

    12ceb8ad42606e784698539674f80cfc


    Code Sign

    Headers

    Imports

    Sections

  • Autokroma AfterCodecs v1.10.15 (x64)/Autokroma AfterCodecs/AfterCodecs.exe
    .exe windows:6 windows x64 arch:x64

    176c57d90ff4ca99bb4470ef511e09a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Autokroma AfterCodecs v1.10.15 (x64)/Autokroma AfterCodecs/AfterCodecsAE.aex
    .dll windows:6 windows x64 arch:x64

    adffeadd2ac857b6c7e409f4679204b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Autokroma AfterCodecs v1.10.15 (x64)/Autokroma AfterCodecs/AfterCodecsPPME.prm
    .dll windows:6 windows x64 arch:x64

    99ab2eb258b664d21d634fa5ed1e71a3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Autokroma AfterCodecs v1.10.15 (x64)/Autokroma AfterCodecs/ffkroma.exe
    .exe windows:6 windows x64 arch:x64

    12ceb8ad42606e784698539674f80cfc


    Code Sign

    Headers

    Imports

    Sections

  • Autokroma AfterCodecs v1.10.15 (x64)/Uninstall Plugins/Autokroma Plugins UNINSTALLER.exe
    .exe windows:4 windows x86 arch:x86

    57e98d9a5a72c8d7ad8fb7a6a58b3daf


    Code Sign

    Headers

    Imports

    Sections

  • Autokroma AfterCodecs v1.10.15 (x64)/installation method.txt