General

  • Target

    v6.19.4_installer_x64_.zip

  • Size

    53.0MB

  • MD5

    fadaca9da2c4604eea55a3e690df1241

  • SHA1

    9806e8edc4480d48d9c6c3069ea36cda6701738c

  • SHA256

    773657ac17971bec14a94f5cf874c21204037cf8b5a4fe59812bb836cca8400c

  • SHA512

    8744328bf07a65a06f397e6e8364a9b3a386ba734a492ee2183d550424271c7254d6a05090ff02450250006dcfadf47113358d6fa927f98675ce6041de950d64

  • SSDEEP

    1572864:Dp+AkxOx6mkMspNbawUPlE6h7NqR2nWXHxMjPbD:P+M6mk5pshPlE6h7NqR2nYMzbD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • v6.19.4_installer_x64_.zip
    .zip

    Password: www.blizzboygames.net

  • APPLETS/IMJPCD.DLL
    .dll windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    086d7fe731041bf6b7b4ead4eca05f07


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • APPLETS/IMJPCMLD.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    985fdef47db40313b27bfccaaf554989


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • APPLETS/IMJPDAPI.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    4e2dcafbee4f4b70ff67e2813462b8dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • APPLETS/IMJPDCTP.DLL
    .dll windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    dfd0ba769eceeabb8c09a3f86ce8ade9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • APPLETS/IMJPPRED.DLL
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    e9f38c63ee5dd637f0c7e6e30091ab52


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • APPLETS/imjpcus.dll
    .dll windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    874ea7e2da73b3aab257cd32c1b554c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IMEKR/imkrapi.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    f045987fa86e336bcbb8585fd7dd178a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IMEKR/imkrotip.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    Password: www.blizzboygames.net

    6fc24d0878d9a5856abcd6e9037f5a1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IMEKR/imkrtip.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ae11853857aaa77d501220f7af7f3760


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • IMEKR/imkrudt.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    bbcc0796298c5faf8df06ace02482b0b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • app__v6.19.4_.msi
    .msi
  • migration/APMonPortMig.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    72bf59904e010e22435bd2ded7575c53


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migration/AppxUpgradeMigrationPlugin.dll
    .dll windows:10 windows x64 arch:x64

    a5114578e2e8d0b9d6cdb867c595a244


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migration/audmigplugin.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    129672cc4d9f93d06764e571d9bb75cd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migration/bridgemigplugin.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2638f6a2f8c41fac5b5cd266d2e8c5c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migration/bthmigplugin.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    66121ef6612c88e7717e606995f096ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migration/chxmig.dll
    .dll windows:10 windows x64 arch:x64

    04ed949102c97f40c910d61ff125f4af


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migwiz/MXEAgent.dll
    .dll windows:10 windows x64 arch:x64

    1e206e43c8057412b49917c02c56ca25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migwiz/cmi2migxml.dll
    .dll windows:10 windows x64 arch:x64

    ed7988298b6c68e0a63a784ef1147f68


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migwiz/csiagent.dll
    .dll windows:10 windows x64 arch:x64

    564b754bf7fd59236c6191d34b8d1d5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • migwiz/migres.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • migwiz/migstore.dll
    .dll windows:10 windows x64 arch:x64

    9c2671b33957c0c6ef2954c37aa281a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wbem/NCProv.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    1ef54f8bb5f737b5c94ff9ec456fb61b


    Headers

    Imports

    Exports

    Sections

  • wbem/NetAdapterCim.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    fbb0ff989ef228f1ae4047715d66db08


    Headers

    Imports

    Exports

    Sections

  • wbem/NetEventPacketCapture.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    a1a1336d4b2381c909c2c8473904e9a7


    Headers

    Imports

    Exports

    Sections

  • wbem/appbackgroundtask.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2e1ed8e14d5a11566896d404533b10ac


    Headers

    Imports

    Exports

    Sections

  • wbem/ndisimplatcim.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    37ebfa6305c8823cec2b50169eaa2cbc


    Headers

    Imports

    Exports

    Sections

  • wbem/netdacim.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    c2b3ad892319a4711be4694947f3c6af


    Headers

    Imports

    Exports

    Sections