General

  • Target

    1aa60e99e1a78cdc167e64e85a7bc75b338767e58563c40e84b695d02a98ce2f.exe

  • Size

    31.4MB

  • MD5

    c12c9a48c9e91d549af16a1c8632d174

  • SHA1

    c0e4bf239214121b417181a50486e8fc6f044eff

  • SHA256

    1aa60e99e1a78cdc167e64e85a7bc75b338767e58563c40e84b695d02a98ce2f

  • SHA512

    363c1851dcac65c491ef45640c51fe6cf4d257c8443ee34db3777d8f0770f25bbbb67222f070929a943142178e2299380ebe7ba0c31f1bf064241c5fec6244d6

  • SSDEEP

    786432:Z4hMtbwlId8kkaZCFWqXrx4dQnJwer4Zyi5mub/j1Qg0zMv:Z8MtbmId8kjiWer437NHj+N6

Score
5/10

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

  • HTTP links in PDF interactive object 4 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 1aa60e99e1a78cdc167e64e85a7bc75b338767e58563c40e84b695d02a98ce2f.exe
    .exe windows:4 windows x86 arch:x86

    c05041e01f84e1ccca9c4451f3b6a383


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $_1_/PanoramaStudio4Pro.lrplugin/ExportDialogSections.lua
  • $_1_/PanoramaStudio4Pro.lrplugin/Info.lua
  • $_1_/PanoramaStudio4Pro.lrplugin/PSExportServiceProvider.lua
  • $_1_/PanoramaStudio4Pro.lrplugin/PanoramaStudioApplication.lua
  • $_1_/PanoramaStudio4Pro.lrplugin/PanoramaStudioTask.lua
  • $_1_/PanoramaStudio4Pro.lrplugin/TranslatedStrings_de.txt
  • $_1_/PanoramaStudio4Pro.lrplugin/presets/PanoramaStudio_multirowJPG.lrtemplate
  • $_1_/PanoramaStudio4Pro.lrplugin/presets/PanoramaStudio_multirowTIF.lrtemplate
  • $_1_/PanoramaStudio4Pro.lrplugin/presets/PanoramaStudio_singlerowJPG.lrtemplate
  • $_1_/PanoramaStudio4Pro.lrplugin/presets/PanoramaStudio_singlerowTIF.lrtemplate
  • $_1_/PanoramaStudio4Pro.lrplugin/win/appPath.exe
    .exe windows:5 windows x86 arch:x86

    4c8bb815bca07f1be72a0694b872a749


    Code Sign

    Headers

    Imports

    Sections

  • $_1_/PanoramaStudio4Pro.lrplugin/win/uninstall.exe.nsis
  • Licence.txt
  • License.txt
  • Lizenz.txt
  • Order_de.html
    .html
  • Order_en.html
    .html
  • Order_fr.html
    .html
  • PanoramaStudio Handbuch.pdf
    .pdf
  • PanoramaStudio Manual.pdf
    .pdf
  • PanoramaStudio4Pro.exe
    .exe windows:6 windows x64 arch:x64

    e541aa21bf085c2e2cb9a1edeee23370


    Code Sign

    Headers

    Imports

    Sections

  • PanoramaStudioViewer/Documentation.pdf
    .pdf
    • http://050e.g.chrome

    • http://051.panoStudioViewer.open

    • http://051.show

    • http://051Calledafter2secondsofuserinactivity.Thecallisrepeatedevery2secondsofuserinactivity.ms

    • http://051Calledwhentheplaybackofanaudioobjectstarts.id

    • http://051Calledwhentheplaybackofanaudioobjectstops.id

    • http://051Findalayerorobjectbasedonitsid.global

    • http://225easeOutInBounceAvisualizationofthedifferenttweentypescanbefounde.g.here

    • http://e.g.blue

    • Show all
  • PanoramaStudioViewer/Dokumentation.pdf
    .pdf
    • http://002nden.global

    • http://051.panoStudioViewer.open

    • http://051.show

    • http://051Liefertdenmaxzoom-Wertwieincameragesetzt.open

    • http://051Wirdnach2SekundenohneNutzerinteraktionaufgerufen.Aufrufwirdalle2SekundenohneNutzerin-teraktionwiederholt.ms

    • http://easings.net/de

    • http://easings.net/de5.3.4LokaleFunktionenvonButtonsNebendenLayer-Funktionen

    • http://music.mp

    • http://tshsoft.de

    • Show all
  • PanoramaStudioViewer/Licence.txt
  • PanoramaStudioViewer/License.txt
  • PanoramaStudioViewer/Lizenz.txt
  • PanoramaStudioViewer/panoStudioViewer.js
    .js
  • Qt5CoreR.dll
    .dll windows:6 windows x64 arch:x64

    80a1be315aa5769e1e3245e7fd75deea


    Headers

    Imports

    Exports

    Sections

  • Qt5GuiR.dll
    .dll windows:6 windows x64 arch:x64

    5f632ef595472603a32065fc1f331ca6


    Headers

    Imports

    Exports

    Sections

  • Qt5NetworkR.dll
    .dll windows:6 windows x64 arch:x64

    0b30c28e0154914b2adfaa4b749e1e65


    Headers

    Imports

    Exports

    Sections

  • Qt5PrintSupportR.dll
    .dll windows:6 windows x64 arch:x64

    4549bd1478d798c6d0d74985939e8127


    Headers

    Imports

    Exports

    Sections

  • Qt5SvgR.dll
    .dll windows:6 windows x64 arch:x64

    524623870edf8e19a5d1b5fdb6b4da82


    Headers

    Imports

    Exports

    Sections

  • Qt5WidgetsR.dll
    .dll windows:6 windows x64 arch:x64

    ba3557c0888e6ef841b478bbb3bc1bd0


    Headers

    Imports

    Exports

    Sections

  • camdb.dat
  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    7f070c3864ce20e1b9879a9e3126cd30


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • filters.dll
    .dll windows:6 windows x64 arch:x64

    b053843309509eabeef0931a61b50ace


    Headers

    Imports

    Exports

    Sections

  • io/common.pio
    .dll windows:6 windows x64 arch:x64

    815972bab119b321344fcaf6a2308bfb


    Headers

    Imports

    Exports

    Sections

  • io/rawdll.pio
    .dll windows:6 windows x64 arch:x64

    98875f809f0fc9800bf4a46568e46887


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2588b74d70e6cdd61c8f0d863517a6b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    c1687527a3d5b7532fa653f66eba12e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • panoramastudio.qm
  • panoramastudio_de.qm
  • panoramastudio_fr.qm
  • papplet.dll
    .dll windows:6 windows x64 arch:x64

    ec41a8287b0f37903469637ae63291ac


    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    a7d18065f2b0f2b98abcc17830b78366


    Headers

    Imports

    Exports

    Sections

  • printsupport/windowsprintersupport.dll
    .dll windows:6 windows x64 arch:x64

    ae52343b4da6f016cb20b2ebb10aea34


    Headers

    Imports

    Exports

    Sections

  • qtbase_de.qm
  • qtbase_fr.qm
  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    2db35c0d0d87984ea0a5a78365cb6c96


    Headers

    Imports

    Exports

    Sections

  • vcomp140.dll
    .dll windows:6 windows x64 arch:x64

    b0dceb96b51d2648c4e665c9ec09b163


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • winmig-28.dll
    .dll windows:6 windows x64 arch:x64

    33ac2ff16b61c91f4ef7ccf19efbba8f


    Code Sign

    Headers

    Imports

    Exports

    Sections