General

  • Target

    ExpressGate_Installer_V131310.zip

  • Size

    158.2MB

  • MD5

    b94e19a19a6e3f069b2453d7f3ddef3e

  • SHA1

    858b4658f72544be37e5c73947761ae6a3902dae

  • SHA256

    1749ad0ac63c074fb5d6d98dafe53b4de1ec706c627966b07d2b7001be8c4f77

  • SHA512

    d95c2a2d17f2f1090b02785e42620c46a20461bb753e359c2f255a97fb660ef20c8dd277edf960c4b29c525d921cd41ba578f75ccdf4c90fa348d7bb58ed4d09

  • SSDEEP

    3145728:zW4VBSq+afdprAIYzHRygOjME+pHGI5l+xKzSIH:zW4SZaPQZOjMh5+xKzjH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ExpressGate_Installer_V131310.zip
    .zip

    Password: asusexpres

  • ExpressGate_Installer_V131310/AsusSetup.exe
    .exe windows:4 windows x86 arch:x86

    Password: asusexpres

    0d0d227ff6b4d207f0e762819e751da2


    Headers

    Imports

    Exports

    Sections

  • ExpressGate_Installer_V131310/AsusSetup.ini
  • ExpressGate_Installer_V131310/English.ini
  • ExpressGate_Installer_V131310/French.ini
  • ExpressGate_Installer_V131310/German.ini
  • ExpressGate_Installer_V131310/Japanese.ini
  • ExpressGate_Installer_V131310/SChinese.ini
  • ExpressGate_Installer_V131310/Setup.EXE
    .exe windows:4 windows x86 arch:x86

    Password: asusexpres

    ee5d64bd299805320bf7ca40b8082306


    Code Sign

    Headers

    Imports

    Sections

  • ExpressGate_Installer_V131310/TChinese.ini