General

  • Target

    ProjectSharingServerInstaller-646325-win-installer-1002.exe

  • Size

    18.2MB

  • MD5

    834ee13070c9bff093cc6ebe7757b562

  • SHA1

    bd6049097e0f3804e4dbc46a2fdec93fe4041d1f

  • SHA256

    62025d95e43c9b183264626329a1ab4ccd377cefda91a3af3f5121789bd3f510

  • SHA512

    5c684a090b717a43859d42586507560c00b853d372b64d412636b94f9452f4564dabb65c645d8afb1ed4b8f029acd1e6c9d1372a5747734b809dbeda6d73a505

  • SSDEEP

    393216:SoiZJPUTDlDtzz1/5FEr+T+Eg+iXRIYhWTAKXsyQeQvby:2XcTZDtdRFEr+TVaXRI1jsBeYby

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ProjectSharingServerInstaller-646325-win-installer-1002.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ec5fddc407d2b4e0a16fc4d786afc555


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    a89a235c853214d5f945ce4c2f607130


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsJSON.dll
    .dll windows:6 windows x86 arch:x86

    674631b5b86309caa1d0df66c91a50f2


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisFirewallW.dll
    .dll windows:4 windows x86 arch:x86

    18ecfc7436b69f8c13ec22664f9f1857


    Headers

    Imports

    Exports

    Sections

  • $_2_/Runtime/VC_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/config.json
  • $_2_/log/$_2_/uninstall.exe.nsis
  • $_2_/nssm.exe
    .exe windows:5 windows x64 arch:x64

    e14388498639688dc750895bc5ef963a


    Headers

    Imports

    Sections

  • $_2_/start.bat
  • $_2_/stop.bat
  • $_3_/psserverd.exe
    .exe windows:6 windows x64 arch:x64

    8536d8b1273ef9f5f2440a4b015e3c54


    Headers

    Imports

    Sections