General

  • Target

    taskfree.exe

  • Size

    4.3MB

  • MD5

    73493ee93a0a5be10908a8c2cb5a8557

  • SHA1

    63e59141aba45f8b86fc149f83b23fc97e1c9ca4

  • SHA256

    8507526b209551e01093ef6991491a1ed2ef1bd83a3011a593763d1b2481c858

  • SHA512

    7bacd53e494f2bc15426e5347de231e1fc6d84efc1ecc529f79301ead3ffdbc16a95ee96d44f00abfb3d0662f2413f429af549a24739b3d13ae81e235fe0ba50

  • SSDEEP

    98304:wla3RCzQfS8PrpcyrYuJmudWJSAsKNZea+Y7kYOhLKUp0oePpAu3r1z7ov:wtoS8TpcONXIEAtNkaZkHhz1Fu71nov

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • taskfree.exe
    .exe windows:4 windows x86 arch:x86

    1f23f452093b5c1ff091a2f9fb4fa3e9


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    735e27ae3d7df8c0487e4353d04f6f28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $TEMP/AnVir.exe
    .exe windows:5 windows x86 arch:x86

    c025852bb7b8f6f254448089f12d52ed


    Code Sign

    Headers

    Imports

    Sections

  • AnVir.exe
    .exe windows:5 windows x86 arch:x86

    c025852bb7b8f6f254448089f12d52ed


    Code Sign

    Headers

    Imports

    Sections

  • AnvirHook8.dll
    .dll windows:5 windows x86 arch:x86

    4d3d5cda99c0f7e0bc7e72dc64b6e178


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AnvirHook8_64.dll
    .dll windows:5 windows x64 arch:x64

    3c77569552017b41c37267fe86b374b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Languages/anvir_Croatian.txt
  • Languages/anvir_Czech.txt
  • Languages/anvir_Danish.txt
  • Languages/anvir_Dutch.txt
  • Languages/anvir_Finnish.txt
  • Languages/anvir_French.txt
  • Languages/anvir_German.txt
  • Languages/anvir_Greek.txt
  • Languages/anvir_Italian.txt
  • Languages/anvir_Japanese.txt
  • Languages/anvir_Korean.txt
  • Languages/anvir_Norwegian.txt
  • Languages/anvir_Polish.txt
  • Languages/anvir_Portuguese.txt
  • Languages/anvir_Slovenian.txt
  • Languages/anvir_Spanish.txt
  • Languages/anvir_Vietnamese.txt
  • Languages/anvir_swedish.txt
  • OpenHardwareMonitor/Aga.Controls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • OpenHardwareMonitor/License.html
  • OpenHardwareMonitor/OpenHardwareMonitor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • OpenHardwareMonitor/OpenHardwareMonitorLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • OpenHardwareMonitor/OxyPlot.WindowsForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • OpenHardwareMonitor/OxyPlot.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • VirusTotalUpload.exe
    .exe windows:5 windows x86 arch:x86

    1c06186a7f0367e14a6db68fa3b0c6b3


    Headers

    Imports

    Sections

  • anvir64.exe
    .exe windows:5 windows x64 arch:x64

    07a5d0d57bb63b2e4727581da8d89483


    Code Sign

    Headers

    Imports

    Sections

  • anvirlauncher.exe
    .exe windows:6 windows x86 arch:x86

    27cef9d26747652e0d11e3c14bb6154f


    Code Sign

    Headers

    Imports

    Sections

  • portable.txt
  • uninstall.exe.nsis