General

  • Target
    Adobe_Acrobat_en_installer_o_backup_v8.6.0.338_oid595f2f7b-2721-4965-9a47-5884cf68f0d0_bidSEEzazG0BU6CB6wd37dv8A.exe
  • Size 24.8MB
  • Sample260620-arftdsdx51
  • SHA256 f11345c8996c1750815b1d25269ca69c7b3a931ebfb244cd85c23b299d92fdcb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 2 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 57 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

File Explorer

  • Adobe_Acrobat_en_installer_o_backup_v8.6.0.338_oid595f2f7b-2721-4965-9a47-5884cf68f0d0_bidSEEzazG0BU6CB6wd37dv8A.exe
    .exe 24.8MB
  • $PLUGINSDIR/INetC.dll
    .dll 21KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 10KB
  • $PLUGINSDIR/UAC.dll
    .dll 17KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsArray.dll
    .dll 12KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsJSON.dll
    .dll 21KB
  • $PLUGINSDIR/processwork.dll
    .dll 231KB
  • $TEMP/$R0
    .exe 47KB
  • $TEMP/$_65_
    .exe 47KB
  • $_34_
    .exe 2.6MB
  • $_34_.config
    .xml 3KB
  • CBBackupPlan.exe
    .exe 1.1MB
  • CBBackupPlan.exe.config
    .xml 3KB
  • CBFS6Net.dll
    .dll 336KB
  • Cloud.AzureClient.dll
    .dll 352KB
  • Cloud.Backup.DiskImage.BootImage.dll
    .dll 282KB
  • Cloud.Backup.DiskImage.dll
    .dll 1.7MB
  • Cloud.Backup.ESXiEngine.dll
    .dll 16KB
  • Cloud.Backup.ESXiEngine55.dll
    .dll 146KB
  • Cloud.Backup.ESXiEngine67.dll
    .dll 148KB
  • Cloud.Backup.ESXiEngine80.dll
    .dll 148KB
  • Cloud.Backup.Engine.Data.SQLite.dll
    .dll 23KB
  • Cloud.Backup.Engine.MBS.XmlSerializers.dll
    .dll 328KB
  • Cloud.Backup.Engine.MBS.dll
    .dll 65KB
  • Cloud.Backup.Engine.XmlSerializers.dll
    .dll 4.7MB
  • Cloud.Backup.Engine.dll
    .dll 5.3MB
  • Cloud.Backup.Exchange.dll
    .dll 412KB
  • Cloud.Backup.MSSQL.dll
    .dll 53KB
  • Cloud.Backup.RM.Service.exe
    .exe 109KB
  • Cloud.Backup.RM.Service.exe.config
    .xml 3KB
  • Cloud.Backup.Scheduler.exe
    .exe 148KB
  • Cloud.Backup.Scheduler.exe.config
    .xml 3KB
  • Cloud.Backup.UI.dll
    .exe 14.9MB
  • Cloud.Backup.VM.dll
    .dll 373KB
  • Cloud.Backup.Wpf.dll
    .exe 2.6MB
  • Cloud.Backup.dll
    .dll 311KB
  • Cloud.Base.XmlSerializers.dll
    .dll 1.0MB
  • Cloud.Base.dll
    .dll 1.4MB
  • Cloud.CbfsInterface.dll
    .dll 63KB
  • Cloud.Client.XmlSerializers.dll
    .dll 23KB
  • Cloud.Client.dll
    .dll 1.1MB
  • Cloud.DiskImage.Flash.Launcher.exe
    .exe 332KB
  • Cloud.DiskImage.RestoreVerificationService.exe
    .exe 241KB
  • Cloud.GoogleClient.dll
    .dll 301KB
  • Cloud.OpenStackClient.dll
    .dll 124KB
  • Cloud.S3Client.dll
    .dll 1.1MB
  • Cloud.Wizard.dll
    .dll 61KB
  • Dapper.StrongName.dll
    .dll 171KB
  • DiskAccessLibrary.FileSystems.Abstractions.dll
    .dll 8KB
  • DiskAccessLibrary.dll
    .dll 273KB
  • Esent.Interop.dll
    .dll 359KB
  • Hpack.dll
    .dll 34KB
  • Http2.dll
    .dll 95KB
  • ICSharpCode.SharpZipLib.dll
    .dll 200KB
  • ISCSI.dll
    .dll 113KB
  • LZ4.dll
    .dll 142KB
  • Lucene.Net.dll
    .dll 736KB
  • ManagedNativeWifi.dll
    .dll 99KB
  • Microsoft.Exchange.WebServices.dll
    .dll 1.1MB
  • Microsoft.Extensions.Logging.Abstractions.dll
    .dll 62KB
  • MurmurHash.dll
    .dll 15KB
  • SQLite.Interop.dll
    .dll 1.7MB
  • SecureBlackbox.FTPS.dll
    .dll 106KB
  • SecureBlackbox.SFTP.dll
    .dll 138KB
  • SecureBlackbox.SFTPCommon.dll
    .dll 91KB
  • SecureBlackbox.SSHClient.dll
    .dll 283KB
  • SecureBlackbox.SSHCommon.dll
    .dll 421KB
  • SecureBlackbox.SSLClient.dll
    .dll 185KB
  • SecureBlackbox.SSLCommon.dll
    .dll 106KB
  • SecureBlackbox.dll
    .dll 3.4MB
  • System.Buffers.dll
    .dll 23KB
  • System.ComponentModel.Annotations.dll
    .dll 42KB
  • System.Data.HashFunction.xxHash.dll
    .dll 21KB
  • System.Data.SQLite.dll
    .dll 402KB
  • System.Memory.dll
    .dll 141KB
  • System.Numerics.Vectors.dll
    .dll 107KB
  • System.Runtime.CompilerServices.Unsafe.dll
    .dll 18KB
  • System.Threading.Tasks.Extensions.dll
    .dll 25KB
  • ZstdNet.dll
    .dll 27KB
  • cbb.exe
    .exe 657KB
  • cbb.exe.config
    .xml 2KB
  • libzstd.dll
    .dll 780KB

Adobe_Acrobat_en_installer_o_backup_v8.6.0.338_oid595f2f7b-2721-4965-9a47-5884cf68f0d0_bidSEEzazG0BU6CB6wd37dv8A.exe

  • IMPHASH 12082e77cfc7e34f96f21f95764c8ac3
  • SHA256 f11345c8996c1750815b1d25269ca69c7b3a931ebfb244cd85c23b299d92fdcb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cc:d7:ae:86:e9:ca:69:83:63:86:a3:c5:d7:7f:61:1b:f9:fe:95:4c:b4:12:39:a0:ad:2c:3c:e2:bd:e0:8b:67
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=MSPBytes Corp,O=MSPBytes Corp,L=Pittsburgh,ST=Pennsylvania,C=US
Minor OS version
0
Major OS version
4
Entry point
13733
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths