General

  • Target

    dfsetup222.exe

  • Size

    7.1MB

  • MD5

    6961ad3a4a5625db89cf901d3b48d597

  • SHA1

    ca37e6361cedea61f167145b31ef0850c6ddcd77

  • SHA256

    167b7192937b39e657def16ffb0fdbbab326f007747505d5c8785811d6b03ab8

  • SHA512

    9d6b1456a60d5902650a5942dfb4137f476a2b81cdff4149117914f65b6444d1bfa0a3ce9dd29998017513ddae7eba0419da37ce054888bbd0937679eb673c55

  • SSDEEP

    196608:Sai5Pg/CtTmdarnCCpbdjchVBqrAZgK9UBdza3qkrkzhJMZ:Saqtidarnf+VQgKorkFqZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • dfsetup222.exe
    .exe windows:5 windows x86 arch:x86

    377a97652fdf5740d8cc11d5ce124fed


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:5 windows x86 arch:x86

    59070d80178eb0db7b7113b7a8608502


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/gcapi_dll.dll
    .dll windows:5 windows x86 arch:x86

    26266d1a8a5fbe7334adaf3309d96608


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/g/gcombo/ComboOffer_1025.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1026.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1027.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1028.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1029.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1030.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1031.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1032.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1033.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1034.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1035.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1036.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1037.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1038.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1040.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1041.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1042.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1043.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1044.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1045.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1046.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1048.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1049.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1050.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1051.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1053.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1054.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1055.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1057.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1058.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1060.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1061.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1062.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1066.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_1102.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_2052.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_2070.html
    .html
  • $PLUGINSDIR/g/gcombo/ComboOffer_3098.html
    .html
  • $PLUGINSDIR/g/gcombo/combo-offer.png
    .png
  • $PLUGINSDIR/g/pfWWW.dll
    .dll windows:6 windows x86 arch:x86

    0b014cd10403d41385037c19158ec8ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/p/$_57_/pfAP.dll
    .dll windows:6 windows x86 arch:x86

    c64550027a7f1b6995572b9c5f642645


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_124_/$_124_/pfUI.dll
    .dll windows:6 windows x86 arch:x86

    2098ffb08712ddc0dac6b33fecf1aefb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_125_/DF_computer.png
    .png
  • $_125_/Defraggler_Logo_72px.png
    .png
  • $_125_/Montserrat-Regular.otf
  • $_125_/PF_logo.png
    .png
  • $_125_/lang-1025.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1027.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1028.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1029.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1030.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1032.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1044.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1048.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1057.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1061.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1063.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1065.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $_125_/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Defraggler.exe
    .exe windows:5 windows x86 arch:x86

    a0930b0cc8ccbd7a18adbf3d135d07ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Defraggler64.exe
    .exe windows:5 windows x64 arch:x64

    27dac274fcc57733ba691fba979696e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DefragglerShell.dll.new
    .dll regsvr32 windows:5 windows x86 arch:x86

    f607d10abf25cb82f254e02efda0e528


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DefragglerShell64.dll.new
    .dll regsvr32 windows:5 windows x64 arch:x64

    25652ebef723d48f8d6e3bd7ebb6b38d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Lang/lang-1025.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1027.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1028.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1029.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1030.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1032.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1044.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1048.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1057.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1061.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1063.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1065.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • df.exe
    .exe windows:5 windows x86 arch:x86

    86003c972530424ba3b36b02f93ed7bb


    Code Sign

    Headers

    Imports

    Sections

  • df64.exe
    .exe windows:5 windows x64 arch:x64

    ac610a8d1917b8ba0e63a813ae03bb8d


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:5 windows x86 arch:x86

    377a97652fdf5740d8cc11d5ce124fed


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections