General

  • Target
    anyfix-ios-system-recovery-en-setup.exe
  • Size 7.1MB
  • Sample240824-d8zvdatbnr
  • SHA256 0609ebd4157f1b0591ab2a98749c0073a479ffae8e3eb5ba560838bb3eaaa0c5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • anyfix-ios-system-recovery-en-setup.exe
    .exe 7.1MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/ExecDos.dll
    .dll 6KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/Help.ico
    185KB
  • $PLUGINSDIR/Setup.ico
    185KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/dotNetFx45_Full_setup.exe
    .exe 982KB
  • $PLUGINSDIR/modern-install.ico
    222KB
  • $PLUGINSDIR/msvcp100.dll
    .dll 593KB
  • $PLUGINSDIR/msvcr100.dll
    .dll 809KB
  • $PLUGINSDIR/nsDui.dll
    .dll 3.1MB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 313KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/track_Official-com.txt
    33B
  • $PLUGINSDIR/uninstall.exe
    .exe 304KB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/CheckProVs.dll
    .dll 7KB
  • $PLUGINSDIR/GoogleTracingLib.dll
    .dll 36KB
  • $PLUGINSDIR/SelfDel.dll
    .dll 5KB
  • out.upx
    .dll 5KB
  • $PLUGINSDIR/SkinBtn.dll
    .dll 4KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/btn_close.bmp
    19KB
  • $PLUGINSDIR/btn_install.bmp
    134KB
  • $PLUGINSDIR/left_path.bmp
    63KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • $PLUGINSDIR/unbg.bmp
    786KB
  • $PLUGINSDIR/xl.7z
    .7z 2.2MB
  • DuiLib.lib
    4.6MB
  • xldownload/download/MiniTPFw.exe
    .exe 58KB
  • xldownload/download/MiniThunderPlatform.exe
    .exe 262KB
  • xldownload/download/ThunderFW.exe
    .exe 71KB
  • xldownload/download/XLBugHandler.dll
    .dll 98KB
  • xldownload/download/XLBugReport.exe
    .exe 242KB
  • xldownload/download/atl71.dll
    .dll 87KB
  • xldownload/download/dl_peer_id.dll
    .dll 89KB
  • xldownload/download/download_engine.dll
    .dll 3.3MB
  • xldownload/download/id.dat
    40B
  • xldownload/download/minizip.dll
    .dll 19KB
  • xldownload/download/msvcp71.dll
    .dll 492KB
  • xldownload/download/msvcr71.dll
    .dll 340KB
  • xldownload/download/zlib1.dll
    .dll 58KB
  • xldownload/xldl.dll
    .dll 282KB
  • xldownload/xldl.h
    5KB

anyfix-ios-system-recovery-en-setup.exe

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 0609ebd4157f1b0591ab2a98749c0073a479ffae8e3eb5ba560838bb3eaaa0c5
  • MD5 SHA1 SHA512 SSDEEP
Digest
96:ab:ba:e3:c1:aa:aa:1f:62:ad:5c:69:eb:46:21:d7:f7:5d:90:2c:b5:d2:a8:55:de:34:7d:84:14:12:d5:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=C4175219,CN=iMobie Inc.,O=iMobie Inc.,POSTALCODE=92618,STREET=113 Iron Gate,L=Irvine,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
5
Entry point
13333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths