General

  • Target

    PassGuardSetupX64.exe

  • Size

    2.3MB

  • MD5

    1a9385ca81a465f755a80e40639d77e3

  • SHA1

    2cab2193933d0b6cbba1418801de0ebb37905633

  • SHA256

    7d6b418eb9211a2d8fd2e1c30bacbc5d1923ebbd7c259b9a5c0df6302d6cb332

  • SHA512

    509c3be9910ef8294fbcdebd258a9ccadb0a5683f1c205d51a94589b6c3da6cefb1d08c482ae842b14a0b4ce6eb6ffde3b600623a91e0a93b6179f7c13a9bd13

  • SSDEEP

    49152:BUmaXxjkFiWH0yaadUwL8IGFfqHaWZqyNxlRY0AJ:BUmaXxjRxjadLLHHZqyRY3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • PassGuardSetupX64.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/messagebox.dll
    .dll windows:4 windows x86 arch:x86

    c3f3267799760b39c4e2763e70fc3909


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/Microdone/PassGuard/uninstx64.exe.nsis
  • PassGuardX64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    f3489b7aea9097013de1e233e0339711


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • passguardwin7ins.exe
    .exe windows:5 windows x86 arch:x86

    190ee72e6b20b1938f1aba668a774940


    Code Sign

    Headers

    Imports

    Sections