General

  • Target

    P-94191359RSTE.zip

  • Size

    111.5MB

  • MD5

    19f9eb7e154dfad90948a87cce8c366b

  • SHA1

    62249994c02b157ff8f4fba81d6d452efd4ef050

  • SHA256

    58d1086315a833f3c787719aeda4418a6e815fb383f2ce85af5afeadef6e378c

  • SHA512

    54c86eb4d23369c5eb6adc4640111136292a8342542b168f601642d949823392366825714e9578ed0eec0c4b906c02cce58e13f2961e6b7aa8876bc788d42b92

  • SSDEEP

    3145728:7QN7PygmG37Sw279zHKBWD3CF7G7ZqOmAoe3BFrJ:7T60zHbD3C4OI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 67 IoCs

    Checks for missing Authenticode signature.

Files

  • P-94191359RSTE.zip
    .zip
  • App/AppInfo/Launcher/R-Studio.ini
  • App/AppInfo/appicon.ico
  • App/AppInfo/appinfo.ini
  • App/DefaultData/R-TT/R-Studio/settings.ini
  • App/DefaultData/settings/R-TT.reg
  • App/DefaultData/settings/R-TTLM.reg
  • App/RStudio/DdiAPI.dll
    .dll windows:6 windows x86 arch:x86

    4921678c6249fc618db5e753329342c4


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/DdiAPI64.dll
    .dll windows:6 windows x64 arch:x64

    05830530ce37ef260ae22fbe8e67476d


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/DsDev.dll
    .dll windows:6 windows x64 arch:x64

    d71702aa51df74822d4c653b99f6ae60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/RStudio/DsDevUninst.exe
    .exe windows:5 windows x64 arch:x64

    519a869f76898695c3850f906e769388


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/Microsoft.VC90.CRT.manifest
  • App/RStudio/QtAV1.dll
    .dll windows:5 windows x86 arch:x86

    dd51cf3b20d9793f8ab5077863503571


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtAVWidgets1.dll
    .dll windows:5 windows x86 arch:x86

    de386eddcb8b79e1bb2d9bb5bb7a54d4


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtCLucene_.dll
    .dll windows:5 windows x86 arch:x86

    dd754478f25c45de5df49a4f792ae960


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    fbfd9810c4f55dd1916cba94e6dd3e00


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    2c6466cc40582c824ae483e78f77a3fc


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtHelp_.dll
    .dll windows:5 windows x86 arch:x86

    2500f0999a21899bc352d5c382cdba63


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    168a8026f4e4b9c641c7c3ecdc07c71e


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtSql4.dll
    .dll windows:5 windows x86 arch:x86

    947413f8622f568362704552c7b33a18


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtWebKit4.dll
    .dll windows:5 windows x86 arch:x86

    6aa8d68bee9136ea779ae5a78993c637


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/QtXml4.dll
    .dll windows:5 windows x86 arch:x86

    5e0c0b6f1a025ed41d3ac58116ec7bc0


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/R-ImageDisk.sys
    .sys windows:4 windows x86 arch:x86

    0baada74bca05bafcb2cec1728772c43


    Headers

    Imports

    Sections

  • App/RStudio/R-ImageDisk64.sys
    .sys windows:5 windows x64 arch:x64

    98deff3806eb46b6e6333ae4f58a63c1


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/R-Viewer.exe
    .exe windows:5 windows x86 arch:x86

    3a6958c3b277f30136cf962b507585f1


    Headers

    Imports

    Sections

  • App/RStudio/R-Viewer.qrb
  • App/RStudio/RStudio.exe
    .exe windows:5 windows x86 arch:x86

    7554a465e55b4ea03f0670a72787d0ba


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/RStudio32.exe
    .exe windows:5 windows x86 arch:x86

    3cadef74390161dc10c219514d0d94bf


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/RStudio64.exe
    .exe windows:5 windows x64 arch:x64

    9d18009eab578920c7b5ae3fc0b9dcbe


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/RdrVmpUninstall32.exe
    .exe windows:5 windows x86 arch:x86

    3e608b2e66d52e6227b10c83e4154f29


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/RdrVmpUninstall64.exe
    .exe windows:5 windows x64 arch:x64

    f7b34466ac07d89d7f4dc2b098d0f47b


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/Templates/tpl_AVI.xml
    .xml
  • App/RStudio/Templates/tpl_AVI_LIST.xml
    .xml
  • App/RStudio/Viewer/libgfl254.dll
    .dll windows:4 windows x86 arch:x86

    83f7d8f8166cf6178edba7aafe7abbe1


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/Viewer/libgfl267.dll
    .dll windows:4 windows x86 arch:x86

    83f7d8f8166cf6178edba7aafe7abbe1


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/Viewer/libgfl311.dll
    .dll windows:4 windows x86 arch:x86

    83f7d8f8166cf6178edba7aafe7abbe1


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_converter.dll
    .dll windows:5 windows x86 arch:x86

    ccef88557090ab9f38d1fc5e95f984be


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_docx.dll
    .dll windows:5 windows x86 arch:x86

    8b4a20a2abf64d544a2a2ff82dded6e7


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_freeimage.dll
    .dll windows:5 windows x86 arch:x86

    ee328c24e4fad6f4309679e4c5c26997


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_glib.dll
    .dll windows:5 windows x86 arch:x86

    ddaf00e10e32fba02cc0a7b183472be3


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_gsf.dll
    .dll windows:5 windows x86 arch:x86

    fbecb3623697dd42287d154010f02e6c


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_myio.dll
    .dll windows:5 windows x86 arch:x86

    32b60f9780f4753ecbe7894cc9d603c0


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_ppt.dll
    .dll windows:5 windows x86 arch:x86

    bd5c700e58cb58d76dd68a49315ea892


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_pptx.dll
    .dll windows:5 windows x86 arch:x86

    45957520cf8edde962cf9b47ca8c74ab


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_wv2.dll
    .dll windows:5 windows x86 arch:x86

    3cdcdaf2a5f1bab26fa95697fd55098b


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_xls.dll
    .dll windows:5 windows x86 arch:x86

    7801a8911ad88f31303aab07302fdadc


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_xlsx.dll
    .dll windows:5 windows x86 arch:x86

    d8523cb75d6e5d8145ef95d1473d20ab


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_xml2.dll
    .dll windows:5 windows x86 arch:x86

    1f8ea6ae81ceb5c3c4fc1f3dea0d59af


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/_zlib.dll
    .dll windows:5 windows x86 arch:x86

    e8fcd924004be61375969e3c785cbe33


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/amd64/DeepSparUSB.cat
  • App/RStudio/amd64/DeepSparUSB.inf
  • App/RStudio/amd64/DeepSparUSB.sys
    .sys windows:10 windows x64 arch:x64

    c54f611440f15d5a781566facce6b82d


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/amd64/DeepSparUSB10Gb.cat
  • App/RStudio/amd64/DeepSparUSB10Gb.inf
  • App/RStudio/amd64/DeepSparUSB10Gb.sys
    .sys windows:10 windows x64 arch:x64

    c659542a0e70a0ccf88f758b181a6ba8


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/amd64/RdrVmp.sys
    .sys windows:6 windows x64 arch:x64

    083045e2d9650741e5f84575ea12f0b2


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/avcodec-57.dll
    .dll windows:5 windows x86 arch:x86

    15903ec885f1251063267eeab1e1b8e1


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/avfilter-6.dll
    .dll windows:5 windows x86 arch:x86

    457c755b2a93c33f24972f8c33856697


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/avformat-57.dll
    .dll windows:5 windows x86 arch:x86

    b175287ca49acf27d2746d97f9131ad6


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/avutil-55.dll
    .dll windows:5 windows x86 arch:x86

    3e12ea8838d0d6d03def17570b2a35ff


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/de/R-Viewer_de.qm
  • App/RStudio/de/R-Viewer_ja.qm
  • App/RStudio/de/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/de/de/R-Viewer_de.qm
  • App/RStudio/de/de/helpview_de.qm
  • App/RStudio/de/de/qt_de.qm
  • App/RStudio/de/de/qt_help_de.qm
  • App/RStudio/de/de/rs-faq.url
  • App/RStudio/de/eula.txt
  • App/RStudio/de/helpview_de.qm
  • App/RStudio/de/helpview_ja.qm
  • App/RStudio/de/qt_de.qm
  • App/RStudio/de/qt_help_de.qm
  • App/RStudio/de/qt_help_ja.qm
  • App/RStudio/de/qt_ja.qm
  • App/RStudio/de/rs-faq.url
  • App/RStudio/en/RStudio_en.qch
  • App/RStudio/en/RStudio_en.qhc
  • App/RStudio/en/eula.txt
  • App/RStudio/en/rs-faq.url
  • App/RStudio/es/R-Viewer_es.qm
  • App/RStudio/es/RStudio_es.qch
  • App/RStudio/es/RStudio_es.qhc
  • App/RStudio/es/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/es/eula.txt
  • App/RStudio/es/helpview_es.qm
  • App/RStudio/es/qt_es.qm
  • App/RStudio/es/qt_help_es.qm
  • App/RStudio/es/rs-faq.url
  • App/RStudio/fr/R-Viewer_fr.qm
  • App/RStudio/fr/RStudio_fr.qch
  • App/RStudio/fr/RStudio_fr.qhc
  • App/RStudio/fr/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/fr/eula.txt
  • App/RStudio/fr/helpview_fr.qm
  • App/RStudio/fr/qt_fr.qm
  • App/RStudio/fr/qt_help_fr.qm
  • App/RStudio/fr/rs-faq.url
  • App/RStudio/helpview.exe
    .exe windows:5 windows x86 arch:x86

    040128c69efe9a4b5f2ddb75a28ccfe5


    Headers

    Imports

    Sections

  • App/RStudio/helpview.qrb
  • App/RStudio/helpview.txt
  • App/RStudio/i386/RdrVmp.sys
    .sys windows:6 windows x86 arch:x86

    1409ea7d509a3e30d502c8bdaeab25a8


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/iposfd.exe
    .exe windows:5 windows x86 arch:x86

    94fec8dddbfab136e824518b20b2eda3


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/ja/R-Viewer_ja.qm
  • App/RStudio/ja/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/ja/eula.txt
  • App/RStudio/ja/helpview_ja.qm
  • App/RStudio/ja/qt_help_ja.qm
  • App/RStudio/ja/qt_ja.qm
  • App/RStudio/ja/rs-faq.url
  • App/RStudio/libgfl340.dll
    .dll windows:4 windows x86 arch:x86

    8abd36f8cd15838a7ee62295afd1f026


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    788796c8c6c3d01582e0a931bcffaa41


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    2dec2d42421b088bfcddeba53b046464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/RStudio/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0453db624ecaef7c4f3da938cd1d0fc5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qgif4.dll
    .dll windows:5 windows x86 arch:x86

    e0b36bc16a83f8eb3cd6eec37f7d9055


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    02c378f237b334d8de3653a5422be7ce


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qjpeg4.dll
    .dll windows:5 windows x86 arch:x86

    47129320d4400c2658e1af471d6b6e77


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qmng4.dll
    .dll windows:5 windows x86 arch:x86

    2da827f0f7684577f62d2bce4496ea82


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qsvg4.dll
    .dll windows:5 windows x86 arch:x86

    1f11a995ce0d5d7814317fe5e603d48a


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qtga4.dll
    .dll windows:5 windows x86 arch:x86

    12244143eb24a9ec2a901d72bbb033e7


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/imageformats/qtiff4.dll
    .dll windows:5 windows x86 arch:x86

    2b9553a2e30cd8eb556513f6fc3f5d07


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/plugins/sqldrivers/qsqlite4.dll
    .dll windows:5 windows x86 arch:x86

    652a5e14b81b4b85ae765da5a58bb5f3


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/pt/R-Viewer_pt.qm
  • App/RStudio/pt/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/pt/eula.txt
  • App/RStudio/pt/helpview_pt.qm
  • App/RStudio/pt/qt_help_pt.qm
  • App/RStudio/pt/qt_pt.qm
  • App/RStudio/pt/rs-faq.url
  • App/RStudio/rdrvmp.cat
  • App/RStudio/rdrvmp.inf
  • App/RStudio/rhelper.exe
    .exe windows:5 windows x86 arch:x86

    bf85101aae8f807d4a9ba43cc4876604


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/rln_viewer.txt
  • App/RStudio/rloginsrv.exe
    .exe windows:4 windows x86 arch:x86

    974bc30bfabee27b2b7b5f282a9cfc21


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/rportable.rec
  • App/RStudio/rs_vdfio.vxd
  • App/RStudio/rsm.exe
    .exe windows:4 windows x86 arch:x86

    84dc458ed965851435067cf62d272c14


    Code Sign

    Headers

    Imports

    Sections

  • App/RStudio/ru/R-Viewer_ru.qm
  • App/RStudio/ru/RStudio_ru.qch
  • App/RStudio/ru/RStudio_ru.qhc
  • App/RStudio/ru/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/ru/eula.txt
  • App/RStudio/ru/helpview_ru.qm
  • App/RStudio/ru/qt_help_ru.qm
  • App/RStudio/ru/qt_ru.qm
  • App/RStudio/ru/rs-faq.url
  • App/RStudio/swresample-2.dll
    .dll windows:5 windows x86 arch:x86

    5382fccc3a1a90f7c20b42936767c354


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/swscale-4.dll
    .dll windows:5 windows x86 arch:x86

    30aff98589c76ade8eb0cc8836b30641


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/w32/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    7056aeff7db7a50a3c13a499d43f7547


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/w32/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    ebedff1429659a4c6506ecdb229012f3


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/w64/libeay32.dll
    .dll windows:5 windows x64 arch:x64

    653a345694f6adab2450fabf9f96b6a5


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/w64/ssleay32.dll
    .dll windows:5 windows x64 arch:x64

    cbca98c862f9aa3af06db938e146e454


    Headers

    Imports

    Exports

    Sections

  • App/RStudio/zhcn/R-Viewer_zhcn.qm
  • App/RStudio/zhcn/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/zhcn/eula.txt
  • App/RStudio/zhcn/helpview_zhcn.qm
  • App/RStudio/zhcn/qt_help_zhcn.qm
  • App/RStudio/zhcn/qt_zhcn.qm
  • App/RStudio/zhcn/rs-faq.url
  • App/RStudio/zhhk/R-Viewer_zhhk.qm
  • App/RStudio/zhhk/RUpdate.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • App/RStudio/zhhk/eula.txt
  • App/RStudio/zhhk/helpview_zhhk.qm
  • App/RStudio/zhhk/qt_help_zhhk.qm
  • App/RStudio/zhhk/qt_zhhk.qm
  • App/RStudio/zhhk/rs-faq.url
  • R-Studio.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    c4a726be6ec458c19b16bf3893cf4bc1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/execDos.dll
    .dll windows:5 windows x86 arch:x86

    a5d239ed12c9442d63c73cb9ff7cad0e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newadvsplash.dll
    .dll windows:4 windows x86 arch:x86

    7efb019e000b6e0291c32d00fe622590


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/newtextreplace.dll
    .dll windows:4 windows x86 arch:x86

    42624ab02b71999959eb0f4168f609bb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/registry.dll
    .dll windows:4 windows x86 arch:x86

    f450890bf454de37198f435d5832e67d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/splash.bmp