General

  • Target
    046d-uipak_x32.exe
  • Size 312KB
  • Sample260713-ph8kdaaz91
  • SHA256 85156b6391d646dfd0a9e8fbfba5bf234e1f629c78f0844034330a862fd77c1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 046d-uipak_x32.exe
    .exe 312KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • Ini/directives.ini
    12KB
  • css/basic-quickflips.css
    1KB
  • css/smart.css
    3KB
  • html/download.html
    .html .js 5KB
  • html/finish.html
    .html .js 4KB
  • html/welcome.html
    .js 2KB
  • img/button_close.png
    .png 283B
  • img/button_close_disabled.png
    .png 283B
  • img/device.png
    .png 7KB
  • img/device_jpn.png
    .png 7KB
  • img/icon_error.png
    .png 6KB
  • img/icon_success.png
    .png 5KB
  • img/logo-black.png
    .png 2KB
  • img/logo-too-big.png
    .png 4KB
  • img/logo.png
    .png 1KB
  • img/progress_base.png
    .png 433B
  • img/smart_button.png
    .png 229B
  • img/smart_button_disabled.png
    .png 241B
  • js/IE9.js
    .js 97KB
  • js/blank.gif
    .gif 48B
  • js/jquery-1.3.2.min.js
    .js 64KB
  • js/jquery.quickflip.min.js
    .js 3KB
  • js/lineto-brown-pro-regular.eot
    55KB
  • js/logi_helper.js
    .js 7KB
  • js/logi_helper.vbs
    168B
  • lang/chs/layout.css
    3KB
  • lang/chs/strings.xml
    .xml 1KB
  • lang/cht/layout.css
    3KB
  • lang/cht/strings.xml
    .xml 1KB
  • lang/dan/layout.css
    3KB
  • lang/dan/strings.xml
    .xml 1KB
  • lang/deu/layout.css
    3KB
  • lang/deu/strings.xml
    .xml 1KB
  • lang/ell/layout.css
    3KB
  • lang/ell/strings.xml
    .xml 2KB
  • lang/enu/layout.css
    3KB
  • lang/enu/strings.xml
    .xml 1KB
  • lang/esp/layout.css
    3KB
  • lang/esp/strings.xml
    .xml 1KB
  • lang/fin/layout.css
    3KB
  • lang/fin/strings.xml
    .xml 1KB
  • lang/fra/layout.css
    3KB
  • lang/fra/strings.xml
    .xml 1KB
  • lang/ita/layout.css
    3KB
  • lang/ita/strings.xml
    .xml 1KB
  • lang/jpn/layout.css
    3KB
  • lang/jpn/strings.xml
    .xml 2KB
  • lang/kor/layout.css
    3KB
  • lang/kor/strings.xml
    .xml 1KB
  • lang/nld/layout.css
    3KB
  • lang/nld/strings.xml
    .xml 1KB
  • lang/nor/layout.css
    3KB
  • lang/nor/strings.xml
    .xml 1KB
  • lang/plk/layout.css
    3KB
  • lang/plk/strings.xml
    .xml 1KB
  • lang/ptb/layout.css
    3KB
  • lang/ptb/strings.xml
    .xml 1KB
  • lang/ptg/layout.css
    3KB
  • lang/ptg/strings.xml
    .xml 1KB
  • lang/rus/layout.css
    3KB
  • lang/rus/strings.xml
    .xml 2KB
  • lang/sve/layout.css
    3KB
  • lang/sve/strings.xml
    .xml 1KB
  • lang/zhh/layout.css
    3KB
  • lang/zhh/strings.xml
    .xml 1KB
  • uninstall.exe.nsis
    16KB

046d-uipak_x32.exe

  • IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
  • SHA256 85156b6391d646dfd0a9e8fbfba5bf234e1f629c78f0844034330a862fd77c1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
45:0c:e0:93:be:12:81:13:05:35:e4:ab:07:db:74:5d:7b:27:cd:ab:9e:6e:48:12:8f:59:5a:c4:0a:7d:f2:42
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=1067879,CN=Logitech Inc,O=Logitech Inc,L=Newark,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
5
Entry point
13333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths