Resubmissions

19/11/2024, 19:00

241119-xn2m1szfpa 4

19/11/2024, 18:48

241119-xfzhpa1bnp 4

General

  • Target

    ausetup.exe

  • Size

    8.3MB

  • MD5

    3fc2ce884f6f0aacdc94e6718d3df80d

  • SHA1

    a0b49b73f64dd33ee351e47f35b922d7dade7246

  • SHA256

    a3b612d69c2103a44592b183228c50f9239048bf410f422a76a011cf9e05c43a

  • SHA512

    317e25bd54ff25fab99e82b242fcd7f9e08dac20239ac1619717411c3415ff1c5f2a033839317e8244d272cfa77ea2b08edfd03d9c99012427bbdedb6865e99a

  • SSDEEP

    196608:6W+5c3swnDtZHmNP9NX4Ev3wADK8M4aErtVc0FGj:G5c3PDTGdnJg6K/cm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

Files

  • ausetup.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    691d649a682adb332a1f6554cd41be05


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MachineCode.dll
    .dll windows:5 windows x86 arch:x86

    5f61d48cbd2fe6358e13833e3dd30585


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Uninstaller.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    e269b6260a93a17ceff5184b3982ded8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/stalonestatisticsinfo.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Inetc.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xtInfoPlugin.dll
    .dll windows:4 windows x86 arch:x86

    cee69cd7243c2aa46408f819322b7801


    Headers

    Imports

    Exports

    Sections

  • AppMetrics.dll
    .dll windows:5 windows x86 arch:x86

    07aadeb04f518fc6c625393aa294f730


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CheckUpdate.dll
    .dll windows:5 windows x86 arch:x86

    65f36372190ee0a4eda43fd63f17b097


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Config.dll
    .dll windows:5 windows x86 arch:x86

    65ca07e8a00f22048f652c6702ef0100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CrashReport.dll
    .dll windows:5 windows x86 arch:x86

    fd07e2e2c8bf222eb8bca2b80a9ebdaf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CrashReport.exe
    .exe windows:5 windows x86 arch:x86

    020bbbf3e33c22083ad2a41d9c6463a6


    Code Sign

    Headers

    Imports

    Sections

  • GUWndManager.dll
    .dll windows:5 windows x86 arch:x86

    f5d801341522a2887ef3992ddb4d5afa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LockDll.dll
    .dll windows:5 windows x86 arch:x86

    b57acfb7889744f628cd9fbd9a998097


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MachineCode.dll
    .dll windows:5 windows x86 arch:x86

    5f61d48cbd2fe6358e13833e3dd30585


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT.manifest
    .xml
  • Microsoft.VC90.MFC.manifest
    .xml
  • Register.dll
    .dll windows:5 windows x86 arch:x86

    7f63ac8a5acea7b9d03b5b743de7d260


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SkinsManager.dll
    .dll windows:5 windows x86 arch:x86

    df3ad5c1cb31ac46af3d99aab1837b04


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/ModuleInfo.ini
  • data/uninstall.dat
  • dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • languages.dll
    .dll windows:5 windows x86 arch:x86

    7df26fe550b6734f4e389db92d7648b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • languages/Afrikaans - [M.D.].lng
  • languages/Albanian - [M.D.].lng
  • languages/Amharic - [M.D.].lng
  • languages/Arabic - [M.D.].lng
  • languages/Armenian Language File for Glary Utilities by M.D..lng
  • languages/Armenian.lng
  • languages/Bulgarian.lng
  • languages/Catala.lng
  • languages/Catala_Joan.lng
  • languages/Croatian.lng
  • languages/Cymraeg.lng
  • languages/Czech.lng
  • languages/Czech_Damned.lng
  • languages/Danish(pallan).lng
  • languages/Danish.lng
  • languages/Danish_kt.lng
  • languages/English (proofread by Dillon Ring).lng
  • languages/Espanol_River.lng
  • languages/Estonian.lng
  • languages/Farsi.lng
  • languages/Finnish.lng
  • languages/Finnish_velimatti.lng
  • languages/Francais (Philippe).lng
  • languages/Francais (ReActif).lng
  • languages/Francais (Tonton Greg).lng
  • languages/Francais by gilleliot.lng
  • languages/Francais(PBA).lng
  • languages/Francais(PLL).lng
  • languages/Francais.lng
  • languages/French (Ad Lib).lng
  • languages/French by Joe.lng
  • languages/French(#DG#).lng
  • languages/French(CA).lng
  • languages/French(FR).lng
  • languages/French(ReActif-Korrected).lng
  • languages/French_(RT).lng
  • languages/French_JeuMeu.lng
  • languages/German.lng
  • languages/German_Andy Kleinert.lng
  • languages/German_Erik.lng
  • languages/German_Sarakael.lng
  • languages/Glary Utilities chineseT.lng
  • languages/Greek.lng
  • languages/Hungarian (Timinoun).lng
  • languages/Hungarian.lng
  • languages/Hungarian_l2belteki.lng
  • languages/Igbo.lng
  • languages/Italian_millo.lng
  • languages/Korean by venusgirl.lng
  • languages/Korean_kornet21c.lng
  • languages/Magyar.lng
  • languages/Magyar2.lng
  • languages/PTpt.lng
  • languages/Portuguese_Brazilian.lng
  • languages/Romana.lng
  • languages/Romania.lng
  • languages/Romanian(zocoza).lng
  • languages/Russian (ViktorOn).lng
  • languages/Serbian latin.lng
  • languages/Serbian.lng
  • languages/Slovak_bugtom.lng
  • languages/Slovak_momirek.lng
  • languages/Swedish(ulfclaesson).lng
  • languages/Swedish.lng
  • languages/Turkish_Anteplim.lng
  • languages/Trkce T9.lng
  • languages/Zoulou.lng
  • languages/arabic.lng
  • languages/arabic_Saif.lng
  • languages/bosnian.lng
  • languages/chinese.lng
  • languages/chineseT.lng
  • languages/dutch.lng
  • languages/dutch_hmg.lng
  • languages/english.lng
  • languages/french.lng
  • languages/french2.lng
  • languages/french_Morvant.lng
  • languages/french_andex.lng
  • languages/french_largo.lng
  • languages/french_nantesph.lng
  • languages/hebrew.lng
  • languages/italian.lng
  • languages/italian2.lng
  • languages/italian3.lng
  • languages/italian_alexvis2015.lng
  • languages/japanese.lng
  • languages/japanese_lb.lng
  • languages/korean.lng
  • languages/kurdish.lng
  • languages/latvian.lng
  • languages/lithuanian.lng
  • languages/norwegian.lng
  • languages/norwegian_kurt.lng
  • languages/polish.lng
  • languages/polish_Marta.lng
  • languages/ptbr.lng
  • languages/russian.lng
  • languages/slovenian.lng
  • languages/slovenian_jrudec.lng
  • languages/spain.lng
  • languages/spanish (McM).lng
  • languages/spanish (antonio perez).lng
  • languages/spanish (smrolando).lng
  • languages/spanish.lng
  • languages/spanish_cannie new.lng
  • languages/spanish_emiliograo.lng
  • languages/spanish_ignacio.lng
  • languages/turkish.lng
  • languages/turkish_FaraDelisi.lng
  • languages/ukrainian.lng
  • languages/ukrainian2.lng
  • languages/vietnamese.lng
  • languages/ by firecold.lng
  • languages/ by gchee01.lng
  • languages/.lng
  • mfc90.dll
    .dll windows:5 windows x86 arch:x86

    f2d8030f2fb5ae92ea26c320740a673b


    Code Sign

    Headers

    Imports

    Sections

  • mfc90u.dll
    .dll windows:5 windows x86 arch:x86

    814d9e5c82b805568941908a38d8a5f5


    Code Sign

    Headers

    Imports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.dll
    .dll windows:5 windows x86 arch:x86

    de4e372bd78ecf6f6fd3fbe8f959c0ee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • settings.ini
  • skins/default/Register/InnerBuyRSS/English/images/bg.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/close-click.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/close-default.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/close-hover.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/ico-0.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/ico-2.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/ico-3.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/ico-4.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/ico-5.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/li-dot.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/mark.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/purchasenow-click.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/purchasenow-default.png
    .png
  • skins/default/Register/InnerBuyRSS/English/images/purchasenow-hover.png
    .png
  • skins/default/Register/InnerBuyRSS/English/index.html
    .html .js polyglot
  • skins/default/Register/InnerBuyRSS/English/js/external-api.js
    .js
  • skins/default/Register/InnerBuyRSS/English/js/jquery.js
    .js
  • skins/default/Register/about/Scroll_shade.png
    .png
  • skins/default/Register/about/about-close-click.png
    .png
  • skins/default/Register/about/about-close-default.png
    .png
  • skins/default/Register/about/about-close-hover.png
    .png
  • skins/default/Register/about/about_backimage.png
    .png
  • skins/default/Register/about/about_shade_border.png
    .png
  • skins/default/Register/about/feedback-click.png
    .png
  • skins/default/Register/about/feedback-default.png
    .png
  • skins/default/Register/about/feedback-hover.png
    .png
  • skins/default/Register/about/home-click.png
    .png
  • skins/default/Register/about/home-default.png
    .png
  • skins/default/Register/about/home-hover.png
    .png
  • skins/default/Register/about/line.png
    .png
  • skins/default/Register/active_click.png
    .png
  • skins/default/Register/active_hover.png
    .png
  • skins/default/Register/active_normal.png
    .png
  • skins/default/Register/buy_click.png
    .png
  • skins/default/Register/buy_hover.png
    .png
  • skins/default/Register/buy_normal.png
    .png
  • skins/default/Register/close_click.png
    .png
  • skins/default/Register/close_hover.png
    .png
  • skins/default/Register/close_normal.png
    .png
  • skins/default/Register/contact_us.png
    .png
  • skins/default/Register/edit_disable.png
    .png
  • skins/default/Register/edit_focus.png
    .png
  • skins/default/Register/edit_normal.png
    .png
  • skins/default/Register/email_focus.png
    .png
  • skins/default/Register/email_normal.png
    .png
  • skins/default/Register/export_click.png
    .png
  • skins/default/Register/export_hover.png
    .png
  • skins/default/Register/export_normal.png
    .png
  • skins/default/Register/login_click.png
    .png
  • skins/default/Register/login_hover.png
    .png
  • skins/default/Register/login_normal.png
    .png
  • skins/default/Register/logo.png
    .png
  • skins/default/Register/logomenu_click.png
    .png
  • skins/default/Register/logomenu_hover.png
    .png
  • skins/default/Register/logomenu_normal.png
    .png
  • skins/default/Register/main_logo.png
    .png
  • skins/default/Register/menu_active.png
    .png
  • skins/default/Register/menu_cancel.png
    .png
  • skins/default/Register/menu_signin.png
    .png
  • skins/default/Register/menu_signup.png
    .png
  • skins/default/Register/menu_switch_user.png
    .png
  • skins/default/Register/my_account_menu.png
    .png
  • skins/default/Register/my_account_menu_border.png
    .png
  • skins/default/Register/my_app_img.png
    .png
  • skins/default/Register/my_app_img_s.png
    .png
  • skins/default/Register/my_buy_click.png
    .png
  • skins/default/Register/my_buy_hover.png
    .png
  • skins/default/Register/my_buy_normal.png
    .png
  • skins/default/Register/my_edit_focus.png
    .png
  • skins/default/Register/my_edit_normal.png
    .png
  • skins/default/Register/my_logout_click.png
    .png
  • skins/default/Register/my_logout_hover.png
    .png
  • skins/default/Register/my_logout_normal.png
    .png
  • skins/default/Register/my_menu_click.png
    .png
  • skins/default/Register/my_menu_hover.png
    .png
  • skins/default/Register/my_ok_click.png
    .png
  • skins/default/Register/my_ok_hover.png
    .png
  • skins/default/Register/my_ok_normal.png
    .png
  • skins/default/Register/my_quick_click.png
    .png
  • skins/default/Register/my_quick_hover.png
    .png
  • skins/default/Register/my_quick_normal.png
    .png
  • skins/default/Register/my_user_normal.png
    .png
  • skins/default/Register/my_user_normal0.png
    .png
  • skins/default/Register/my_waiting.gif
    .gif
  • skins/default/Register/password_focus.png
    .png
  • skins/default/Register/password_normal.png
    .png
  • skins/default/Register/refresh_click.png
    .png
  • skins/default/Register/refresh_hover.png
    .png
  • skins/default/Register/refresh_normal.png
    .png
  • skins/default/Register/return_click.png
    .png
  • skins/default/Register/return_hover.png
    .png
  • skins/default/Register/return_normal.png
    .png
  • skins/default/Register/shadow_border.png
    .png
  • skins/default/Register/skin.ini
  • skins/default/Register/trial_buy_click.png
    .png
  • skins/default/Register/trial_buy_hover.png
    .png
  • skins/default/Register/trial_buy_normal.png
    .png
  • skins/default/Register/user_click.png
    .png
  • skins/default/Register/user_edit_focus.png
    .png
  • skins/default/Register/user_edit_normal.png
    .png
  • skins/default/Register/user_hover.png
    .png
  • skins/default/Register/user_normal.png
    .png
  • skins/default/Register/waiting.gif
    .gif
  • skins/default/Register/window_left.png
    .png
  • skins/default/Uninstaller/Check.bmp
  • skins/default/Uninstaller/Status.bmp
  • skins/default/Uninstaller/aButton.bmp
  • skins/default/Uninstaller/b_search.png
    .png
  • skins/default/Uninstaller/leftButton.png
    .png
  • skins/default/Uninstaller/order.bmp
  • skins/default/Uninstaller/recent.png
    .png
  • skins/default/Uninstaller/safe_max.png
    .png
  • skins/default/Uninstaller/skin.ini
  • skins/default/Uninstaller/toolbar.png
    .png
  • skins/default/Uninstaller/wButton.bmp
  • skins/default/common/1.png
    .png
  • skins/default/common/skin.ini
  • sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    f74dcd8be093ec41148d2e338b384046


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • unInstaler.exe
    .exe windows:5 windows x86 arch:x86

    8edfe2ee8e198192d70542258db3493e


    Code Sign

    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    ced282d9b261d1462772017fe2f6972b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Inetc.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    610235b90207a63ccf481f0d4375d329


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    691d649a682adb332a1f6554cd41be05


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    ebc2d915841be8afc8fa1ee9f6850960


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    836a7d41d44b617141edbee32b493b8e


    Code Sign

    Headers

    Imports

    Exports

    Sections