General

  • Target

    __install__v.3.9.8_x64__.zip

  • Size

    49.3MB

  • MD5

    27ad2a011216f797029109dab7e0e595

  • SHA1

    a77ec481f5f1c1f80285b2345aed30d5552c76c2

  • SHA256

    3066a182534705179d8b2613d54d3ff3c06b62141f7f22f2ce6a0c229169e0f8

  • SHA512

    4a69e1351a2ba5e6362e9fdf8fe0948869054e052c676582ee965c292f7fea93499837412785d3cbb64e985b516a229a2879a350764c49ee39876dd4b3b0961f

  • SSDEEP

    1572864:Wh9p+AkxOx6mkMspNbawUPlE6cJMVLYf7EhHfB7dHB2:Whx+M6mk5pshPlE6cyVLYQ5fBC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • __install__v.3.9.8_x64__.zip
    .zip
  • Dism/AppxProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2e13c2bc4f0c9ed9f72b86e3c4cff318


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/AssocProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    e1921d401583d0d512d1a8ec5d16429d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/FolderProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    7191a261b3387fac5d34de51cc114558


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/IBSProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    87b4267c346bd6c6b1f46f0e9977dc3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/LogProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b14bbc4788378a545c762a1ad1f74dcf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/MsiProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ee2bd2ee64b2c570536995a9ee0daf2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/OfflineSetupProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5e14c5f70826fbb5007113b4d0e7e990


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Engines/spsreng.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    85ca5e894a94fccd6b54c5abed4ff89f


    Headers

    Imports

    Exports

    Sections

  • Engines/spsrx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    623052070b7eb1d9cebfa38f9eb93fca


    Headers

    Imports

    Exports

    Sections

  • Engines/srloc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    d83c436f2c45db50cdd9841f0ed5cf06


    Headers

    Imports

    Exports

    Sections

  • __app__v.3.9.8__x64_.msi
    .msi
  • setup/FXSOCM.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    db0ba767c41bba75a59ed33ed0eeda3c


    Headers

    Imports

    Exports

    Sections

  • setup/cmmigr.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    8b7086ef6b16c2350dffe679922b2ebc


    Headers

    Imports

    Exports

    Sections

  • setup/comsetup.dll
    .dll windows:10 windows x64 arch:x64

    a695b01fa31de5822be17a3a223a1bd9


    Headers

    Imports

    Exports

    Sections

  • setup/msdtcstp.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    c2d23549681c11df230ce3afa9835d1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/pbkmigr.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    06752a97e264a8df1d95deb615745d81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/tssysprep.dll
    .dll windows:10 windows x64 arch:x64

    ead979c0e40046289778e8c1af96bfaa


    Headers

    Imports

    Exports

    Sections

  • wbem/WMIPJOBJ.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    98892e6defc71c05cb5245b08941c4c8


    Headers

    Imports

    Exports

    Sections

  • wbem/WMIPSESS.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2da3b341f56e5d5d0381403b02b8df06


    Headers

    Imports

    Exports

    Sections

  • wbem/WMIsvc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    a8071c8826423a68255af6e367b0795d


    Headers

    Imports

    Exports

    Sections

  • wbem/wmitimep.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    1147af12522c0e6dfc7b8cc9bf475447


    Headers

    Imports

    Exports

    Sections

  • wbem/wmiutils.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    0d31e6d27b954ad879cb4df742982f1a


    Headers

    Imports

    Exports

    Sections