General

  • Target

    setup-zippro.exe

  • Size

    47.4MB

  • MD5

    cd3b8a7a1c562941c699f7771f96f8aa

  • SHA1

    d781c125495238bebf8c25621806b72c6316df0c

  • SHA256

    1dadb682f6ab5b0d69b5f98b7ee02db4d8d247f73db119ee30991ebc1bcb851c

  • SHA512

    c528ce30d945ebf1f5ae628fbbecf8629e504e7581f7686899c2df37f8a2cbd937cec2ab84303dd3fedb206459fe0055fd0b49dc1e36b3e3aab1bd74fa8d7ac5

  • SSDEEP

    786432:zi0JPFoVnKQIovmeZ0AzcOLGUE76ysxRzvt3eNiF6A+vdPb6Qm5JRvaRyqYmGM+Q:B9GKQIoJMOCUrRteN9L1PeVRvavYmEAl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 53 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • setup-zippro.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $WINDIR/shellext.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    b155f5653bc0cbced6f93c643805fc56


    Headers

    Imports

    Exports

    Sections

  • decrunch.dll
    .dll windows:4 windows x86 arch:x86

    572c73c0b838e6b9a88653911cad2f87


    Headers

    Imports

    Exports

    Sections

  • resource.dat
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • unzip_QIPInfium.conf
  • unzip_QIPInfium.sfx
    .exe windows:5 windows x86 arch:x86

    541e8d9f8c2ec1bcccf040a786c3a715


    Headers

    Imports

    Sections

  • unzip_access10.conf
  • unzip_access10.jpg
    .jpg
  • unzip_access10.sfx
    .exe windows:5 windows x86 arch:x86

    a632ba5f6232b353f347555d8fae6546


    Headers

    Imports

    Sections

  • unzip_access3.conf
  • unzip_access3.jpg
    .jpg
  • unzip_access3.sfx
    .exe windows:5 windows x86 arch:x86

    0ae4bff2c5d81d469cffd484b8a491c4


    Headers

    Imports

    Sections

  • unzip_access7.conf
  • unzip_access7.jpg
    .jpg
  • unzip_access7.sfx
    .exe windows:5 windows x86 arch:x86

    70d4eee693c106980d86821e1a73ad84


    Headers

    Imports

    Sections

  • unzip_acrobat.conf
  • unzip_acrobat.jpg
    .jpg
  • unzip_acrobat.sfx
    .exe windows:5 windows x86 arch:x86

    e0d9203d63da9584e65861128d400452


    Headers

    Imports

    Sections

  • unzip_aimp.conf
  • unzip_aimp.jpg
    .jpg
  • unzip_aimp.sfx
    .exe windows:5 windows x86 arch:x86

    ec54bc0ef58284694d4fddbae04d43a5


    Headers

    Imports

    Sections

  • unzip_chrome.sfx
    .exe windows:5 windows x86 arch:x86

    39e3402e4f35ece8055c11f2edc5f51a


    Headers

    Imports

    Sections

  • unzip_drweb.conf
  • unzip_drweb.jpg
    .jpg
  • unzip_drweb.sfx
    .exe windows:5 windows x86 arch:x86

    1aa885e510b5730aaef36928490c48e9


    Headers

    Imports

    Sections

  • unzip_dxwebsetup.conf
  • unzip_dxwebsetup.jpg
    .jpg
  • unzip_dxwebsetup.sfx
    .exe windows:5 windows x86 arch:x86

    0dcacd166f2963234dddfe68226d9828


    Headers

    Imports

    Sections

  • unzip_excel10.conf
  • unzip_excel10.jpg
    .jpg
  • unzip_excel10.sfx
    .exe windows:5 windows x86 arch:x86

    a632ba5f6232b353f347555d8fae6546


    Headers

    Imports

    Sections

  • unzip_excel3.conf
  • unzip_excel3.jpg
    .jpg
  • unzip_excel3.sfx
    .exe windows:5 windows x86 arch:x86

    0ae4bff2c5d81d469cffd484b8a491c4


    Headers

    Imports

    Sections

  • unzip_excel7.conf
  • unzip_excel7.jpg
    .jpg
  • unzip_excel7.sfx
    .exe windows:5 windows x86 arch:x86

    70d4eee693c106980d86821e1a73ad84


    Headers

    Imports

    Sections

  • unzip_firefox.conf
  • unzip_firefox.jpg
    .jpg
  • unzip_firefox.sfx
    .exe windows:5 windows x86 arch:x86

    ca12ef14d89fa858c9d772428fb362f5


    Headers

    Imports

    Sections

  • unzip_flash.conf
  • unzip_flash.jpg
    .jpg
  • unzip_flash.sfx
    .exe windows:5 windows x86 arch:x86

    6ec576d0c816477bd4e8ffeb3b4a95f1


    Headers

    Imports

    Sections

  • unzip_icq.conf
  • unzip_icq.jpg
    .jpg
  • unzip_icq.sfx
    .exe windows:5 windows x86 arch:x86

    b784e91ac2072bfb50e2ea1a6b619fe5


    Headers

    Imports

    Sections

  • unzip_installer.conf
  • unzip_installer.jpg
    .jpg
  • unzip_installer.sfx
    .exe windows:5 windows x86 arch:x86

    0e27a3c2f02561a5356eb69fbcfb0383


    Headers

    Imports

    Sections

  • unzip_itunes.conf
  • unzip_itunes.jpg
    .jpg
  • unzip_itunes.sfx
    .exe windows:5 windows x86 arch:x86

    f75c2108f4896c7a2a3a5d1bff4548e7


    Headers

    Imports

    Sections

  • unzip_itunesrus.conf
  • unzip_itunesrus.jpg
    .jpg
  • unzip_itunesrus.sfx
    .exe windows:5 windows x86 arch:x86

    10f3c7fdd0bb132994f0c7f3638aec6a


    Headers

    Imports

    Sections

  • unzip_lvk.conf
  • unzip_lvk.jpg
    .jpg
  • unzip_lvk.sfx
    .exe windows:5 windows x86 arch:x86

    f75c2108f4896c7a2a3a5d1bff4548e7


    Headers

    Imports

    Sections

  • unzip_mailru.conf
  • unzip_mailru.jpg
    .jpg
  • unzip_mailru.sfx
    .exe windows:5 windows x86 arch:x86

    e0d9203d63da9584e65861128d400452


    Headers

    Imports

    Sections

  • unzip_nero.conf
  • unzip_nero.jpg
    .jpg
  • unzip_nero.sfx
    .exe windows:5 windows x86 arch:x86

    2389254cda2d1acf766dd38ce9ecfac1


    Headers

    Imports

    Sections

  • unzip_office10.conf
  • unzip_office10.jpg
    .jpg
  • unzip_office10.sfx
    .exe windows:5 windows x86 arch:x86

    a632ba5f6232b353f347555d8fae6546


    Headers

    Imports

    Sections

  • unzip_office3.conf
  • unzip_office3.jpg
    .jpg
  • unzip_office3.sfx
    .exe windows:5 windows x86 arch:x86

    0ae4bff2c5d81d469cffd484b8a491c4


    Headers

    Imports

    Sections

  • unzip_office7.conf
  • unzip_office7.jpg
    .jpg
  • unzip_office7.sfx
    .exe windows:5 windows x86 arch:x86

    70d4eee693c106980d86821e1a73ad84


    Headers

    Imports

    Sections

  • unzip_opera.conf
  • unzip_opera.jpg
    .jpg
  • unzip_opera.sfx
    .exe windows:5 windows x86 arch:x86

    ed69e9b81ee2eb4408bc6db3607b8baf


    Headers

    Imports

    Sections

  • unzip_outlook10.conf
  • unzip_outlook10.jpg
    .jpg
  • unzip_outlook10.sfx
    .exe windows:5 windows x86 arch:x86

    a632ba5f6232b353f347555d8fae6546


    Headers

    Imports

    Sections

  • unzip_outlook3.conf
  • unzip_outlook3.jpg
    .jpg
  • unzip_outlook3.sfx
    .exe windows:5 windows x86 arch:x86

    0ae4bff2c5d81d469cffd484b8a491c4


    Headers

    Imports

    Sections

  • unzip_outlook7.conf
  • unzip_outlook7.jpg
    .jpg
  • unzip_outlook7.sfx
    .exe windows:5 windows x86 arch:x86

    70d4eee693c106980d86821e1a73ad84


    Headers

    Imports

    Sections

  • unzip_photoshop3.conf
  • unzip_photoshop3.jpg
    .jpg
  • unzip_photoshop3.sfx
    .exe windows:5 windows x86 arch:x86

    ec54bc0ef58284694d4fddbae04d43a5


    Headers

    Imports

    Sections

  • unzip_photoshop3rus.conf
  • unzip_photoshop3rus.jpg
    .jpg
  • unzip_photoshop3rus.sfx
    .exe windows:5 windows x86 arch:x86

    ec54bc0ef58284694d4fddbae04d43a5


    Headers

    Imports

    Sections

  • unzip_photoshop4.conf
  • unzip_photoshop4.jpg
    .jpg
  • unzip_photoshop4.sfx
    .exe windows:5 windows x86 arch:x86

    febf9270017cab6a4a5ef331aba81e1f


    Headers

    Imports

    Sections

  • unzip_photoshop5.conf
  • unzip_photoshop5.jpg
    .jpg
  • unzip_photoshop5.sfx
    .exe windows:5 windows x86 arch:x86

    ec54bc0ef58284694d4fddbae04d43a5


    Headers

    Imports

    Sections

  • unzip_powerpoint10.conf
  • unzip_powerpoint10.jpg
    .jpg
  • unzip_powerpoint10.sfx
    .exe windows:5 windows x86 arch:x86

    a632ba5f6232b353f347555d8fae6546


    Headers

    Imports

    Sections

  • unzip_powerpoint3.conf
  • unzip_powerpoint3.jpg
    .jpg
  • unzip_powerpoint3.sfx
    .exe windows:5 windows x86 arch:x86

    0ae4bff2c5d81d469cffd484b8a491c4


    Headers

    Imports

    Sections

  • unzip_powerpoint7.conf
  • unzip_powerpoint7.jpg
    .jpg
  • unzip_powerpoint7.sfx
    .exe windows:5 windows x86 arch:x86

    70d4eee693c106980d86821e1a73ad84


    Headers

    Imports

    Sections

  • unzip_qip.conf
  • unzip_qip.jpg
    .jpg
  • unzip_qip.sfx
    .exe windows:5 windows x86 arch:x86

    e0d9203d63da9584e65861128d400452


    Headers

    Imports

    Sections

  • unzip_qip2010.conf
  • unzip_qip2010.jpg
    .jpg
  • unzip_qip2010.sfx
    .exe windows:5 windows x86 arch:x86

    e0d9203d63da9584e65861128d400452


    Headers

    Imports

    Sections

  • unzip_rus.conf
  • unzip_rus.jpg
    .jpg
  • unzip_rus.sfx
    .exe windows:5 windows x86 arch:x86

    4f5808d25285e98f4b8091272a6003c6


    Headers

    Imports

    Sections

  • unzip_skype.conf
  • unzip_skype.jpg
    .jpg
  • unzip_skype.sfx
    .exe windows:5 windows x86 arch:x86

    9a226a937d5c9bc5826631693ae3a1d4


    Headers

    Imports

    Sections

  • unzip_utorrent.conf
  • unzip_utorrent.jpg
    .jpg
  • unzip_utorrent.sfx
    .exe windows:5 windows x86 arch:x86

    bd4d4b6de6f15fd84b0438c8e09094d1


    Headers

    Imports

    Sections

  • unzip_winrar.conf
  • unzip_winrar.jpg
    .jpg
  • unzip_winrar.sfx
    .exe windows:5 windows x86 arch:x86

    f75c2108f4896c7a2a3a5d1bff4548e7


    Headers

    Imports

    Sections

  • unzip_winrarSFX.conf
  • unzip_winrarSFX.jpg
    .jpg
  • unzip_winrarSFX.sfx
    .exe windows:5 windows x86 arch:x86

    b6a969da52cfa71c6062500d5343be4e


    Headers

    Imports

    Sections

  • unzip_word10.conf
  • unzip_word10.jpg
    .jpg
  • unzip_word10.sfx
    .exe windows:5 windows x86 arch:x86

    a632ba5f6232b353f347555d8fae6546


    Headers

    Imports

    Sections

  • unzip_word3.conf
  • unzip_word3.jpg
    .jpg
  • unzip_word3.sfx
    .exe windows:5 windows x86 arch:x86

    0ae4bff2c5d81d469cffd484b8a491c4


    Headers

    Imports

    Sections

  • unzip_word7.conf
  • unzip_word7.jpg
    .jpg
  • unzip_word7.sfx
    .exe windows:5 windows x86 arch:x86

    70d4eee693c106980d86821e1a73ad84


    Headers

    Imports

    Sections

  • zippro.exe
    .exe windows:5 windows x86 arch:x86

    7834df12b58b47e8b0aa050ba801f630


    Headers

    Imports

    Sections

  • zipprocmd.exe
    .exe windows:5 windows x86 arch:x86

    f14816b4b8338e843b93a5a1c54fbf1b


    Headers

    Imports

    Sections