General

  • Target

    __install__v.4.0.5_x64__.zip

  • Size

    49.3MB

  • MD5

    10558319c2712f90607a40b7496a9be5

  • SHA1

    09a1ad9c5b05aee01df7d26e3c478efabc39f312

  • SHA256

    097152ca9a6792d418bff3e7a782f443a582b22a027bb259ddbba01235a37848

  • SHA512

    cbb2b6ecf23eedaf55eec2b4e5c612bb52cc8697ce9c3e8e7080ce8dc3e8ea76e86d3d97773794fc82fd109d2b07b7faf04b46bd941612557f361675e17fbf0c

  • SSDEEP

    1572864:WhJp+AkxOx6mkMspNbawUPlE6vJ4H7Yf7EhHfB7dHBr:WhV+M6mk5pshPlE6viH7YQ5fB/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • __install__v.4.0.5_x64__.zip
    .zip
  • Dism/AppxProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2e13c2bc4f0c9ed9f72b86e3c4cff318


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/AssocProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    e1921d401583d0d512d1a8ec5d16429d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/FolderProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    7191a261b3387fac5d34de51cc114558


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/IBSProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    87b4267c346bd6c6b1f46f0e9977dc3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/LogProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    b14bbc4788378a545c762a1ad1f74dcf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/MsiProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    ee2bd2ee64b2c570536995a9ee0daf2e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Dism/OfflineSetupProvider.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    5e14c5f70826fbb5007113b4d0e7e990


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Engines/spsreng.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    85ca5e894a94fccd6b54c5abed4ff89f


    Headers

    Imports

    Exports

    Sections

  • Engines/spsrx.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    623052070b7eb1d9cebfa38f9eb93fca


    Headers

    Imports

    Exports

    Sections

  • Engines/srloc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    d83c436f2c45db50cdd9841f0ed5cf06


    Headers

    Imports

    Exports

    Sections

  • __app__v.4.0.5__x64_.msi
    .msi
  • setup/FXSOCM.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    db0ba767c41bba75a59ed33ed0eeda3c


    Headers

    Imports

    Exports

    Sections

  • setup/cmmigr.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    8b7086ef6b16c2350dffe679922b2ebc


    Headers

    Imports

    Exports

    Sections

  • setup/comsetup.dll
    .dll windows:10 windows x64 arch:x64

    a695b01fa31de5822be17a3a223a1bd9


    Headers

    Imports

    Exports

    Sections

  • setup/msdtcstp.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    c2d23549681c11df230ce3afa9835d1d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/pbkmigr.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    06752a97e264a8df1d95deb615745d81


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • setup/tssysprep.dll
    .dll windows:10 windows x64 arch:x64

    ead979c0e40046289778e8c1af96bfaa


    Headers

    Imports

    Exports

    Sections

  • wbem/WMIPJOBJ.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    98892e6defc71c05cb5245b08941c4c8


    Headers

    Imports

    Exports

    Sections

  • wbem/WMIPSESS.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    2da3b341f56e5d5d0381403b02b8df06


    Headers

    Imports

    Exports

    Sections

  • wbem/WMIsvc.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    a8071c8826423a68255af6e367b0795d


    Headers

    Imports

    Exports

    Sections

  • wbem/wmitimep.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    1147af12522c0e6dfc7b8cc9bf475447


    Headers

    Imports

    Exports

    Sections

  • wbem/wmiutils.dll
    .dll regsvr32 windows:10 windows x64 arch:x64

    0d31e6d27b954ad879cb4df742982f1a


    Headers

    Imports

    Exports

    Sections