General

  • Target

    vonopc.exe

  • Size

    4.1MB

  • MD5

    9f54974e7d8711c10d248c65e23e5a7e

  • SHA1

    963e3be3df0907ad11d4ba1bd2fa177ecd16d9cc

  • SHA256

    1e0025fe5a305b0c2eb48b60b6316b0cee8c897e3ab05c86a019717d93d9713b

  • SHA512

    9c213ad13c453fd2854c53c67b0accbaefae8919c83ee462b8b6cc6a7b69eff5fbfec42e1f3312faaea0c33d75290039b0b2fd3916eacae839628adad2f22926

  • SSDEEP

    98304:t/3IZaSe3yLOF1QQ48j7RpyXy50hNxl52Sq3gVj5V1Rr6RqX:t/3qq1QQJdp8y50hhESq3k32RqX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • vonopc.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • License.txt
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Code Sign

    Headers

    Imports

    Sections

  • VONO.exe
    .exe windows:5 windows x86 arch:x86

    63e25e69ae45caf385751640fd51a56e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hangup.wav
  • lame_enc.dll
    .dll windows:5 windows x86 arch:x86

    db1263e4d1403a0175a12caa5a870cb3


    Headers

    Imports

    Exports

    Sections

  • msgin.wav
  • msgout.wav
  • ringing.wav
  • ringing2.wav
  • ringtone.wav