Resubmissions

02/09/2024, 20:35

240902-zdgk7swfpq 7

02/09/2024, 19:52

240902-ylrwgawckj 7

General

  • Target

    nikcollection-full-1.2.11.exe

  • Size

    429.2MB

  • MD5

    284059da2b8fbec24140d59cbd3017f3

  • SHA1

    69e97d22f10f67268f032090e1160e46f9247ac8

  • SHA256

    8b81b05531a4110f90025d99002e3a59078b39ab4c06747bb7e4e7be5d94fb6d

  • SHA512

    5e2c39cb6b20ca22761ed39b601e3955162ef482de9e180e269d35bae2cf409b449165e65677df87cb9b04b71fcd9cc86446633b39d08e68530a0bd7c2d44987

  • SSDEEP

    6291456:6B22ZxgcO8BQW2vtUvrM1wiSUTbHLrHsg2qq61GuFpLRNPNDC+PhYgtO3DX8kkrM:92vq8BY4xiXvrm0FrNPlC+ZV8DMk5j

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • nikcollection-full-1.2.11.exe
    .exe windows:5 windows x86 arch:x86

    Password: testUs2024!

    32f3282581436269b3a75b6675fe3e08


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/GoogleUpdateSetup.exe
    .exe windows:5 windows x86 arch:x86

    Password: testUs2024!

    459c3aa71b327403228988f8c94ecf4e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    Password: testUs2024!

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    Password: testUs2024!

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    Password: testUs2024!

    1fe003b76229a0ffee4a9219893de38e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    Password: testUs2024!

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WindowsInstaller-KB893803-v2-x86.exe
    .exe windows:6 windows x86 arch:x86

    Password: testUs2024!

    f676e16c67a815430fbcd6d520ece6e4


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:6 windows x86 arch:x86

    Password: testUs2024!

    11cd6df8cede073a0e00bd840833dd26


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    Password: testUs2024!

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/vcredist_x64.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • $_260_Google/Selective Tool/SelectivePalette.8li
    .dll windows:5 windows x64 arch:x64

    c9328a11aec9d019db88328d6f06c9cb


    Code Sign

    Headers

    Imports

    Exports

    Sections