General

  • Target

    setup-2841.exe

  • Size

    7.5MB

  • MD5

    0997274d8bba21ab1bdcd16c7695c041

  • SHA1

    75b8b0281f917fbd0081901a443967fcd450cd3e

  • SHA256

    bfb0169b81bc3fe1a46081fd16e7a1b45068b72e7ed9ecc0931195b7dc721964

  • SHA512

    83b5c199bdf703a008f51196cba85529d5b9cede90ccee42ba73284f269c22600c1cf553cf08dd6818b2120c948d9fc6bd59c9e179d7f784102294348bca6222

  • SSDEEP

    196608:iLCXz4xEfur8vL5zYYK+h4sJwx3XRg/WljBP1M4gvIH4OWndS:ieAEN5zYjgXJq3Bg+vXgvIH47E

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • setup-2841.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/infidele-messenger/global.config
    .xml
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallationType
  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    b4dda0b6d53466311dd6a4c54484815d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MoreInfo.dll
    .dll windows:4 windows x86 arch:x86

    01d106fd6b60d71fb22bfc025916871f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShutdownAllow.dll
    .dll windows:5 windows x86 arch:x86

    e02f5133b7e45d844941aaceef0cff82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/vertical-repair.bmp
  • EULA.rtf
    .rtf
  • Resources/ENU.langpack
  • Resources/FRA.langpack
  • Resources/ITA.langpack
  • Resources/conf.spec
    .xml
  • Resources/skins/basic.skin
  • Resources/sounds/popup.mp3
  • Resources/whitelabel/AppOffline.ico
  • Resources/whitelabel/AppOnline.ico
  • Resources/whitelabel/Messenger.ico
  • Resources/whitelabel/WhiteLabel.config
    .xml
  • Resources/whitelabel/logo.gif
    .gif
  • infidele-messenger.exe
    .exe windows:5 windows x86 arch:x86

    869507d12309e9d4562a2145ac25d882


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    5638c5f549872a35b3c353ac0e24b575


    Headers

    Imports

    Exports

    Sections

  • modules/fmodex.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    d44625fd53fada64c76d589ebe8d2150


    Headers

    Imports

    Exports

    Sections