General

  • Target
    ArgusMonitor_Setup.exe
  • Size 14.6MB
  • Sample260722-qsntdsstf1
  • SHA256 fec06d1a20a1c6b99e9c5b90c2a7dbdaa801e1790391f81d0198bd3207a63059
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ArgusMonitor_Setup.exe
    .exe 14.6MB
  • $PLUGINSDIR/AMIH.dll
    .dll 60KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/SimpleSC.dll
    .dll 1.1MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $_12_/ArgusMonitor.sys
    .sys 79KB
  • AMBattery.dll
    .dll 593KB
  • ArgusControlService.exe
    .exe 1.9MB
  • out.upx
    .exe 7.5MB
  • ArgusMonitor.exe
    .exe 5.5MB
  • out.upx
    .exe 14.3MB
  • ArgusMonitorGadget.exe
    .exe 3.1MB
  • out.upx
    .exe 10.3MB
  • ArgusNetHandler.exe
    .exe 1.7MB
  • out.upx
    .exe 5.1MB
  • ArgusSystemMgr.exe
    .exe 89KB
  • AutoUpdater.exe
    .exe 1.2MB
  • out.upx
    .exe 3.4MB
  • GpuControl.exe
    .exe 253KB
  • HWInit64.dll
    .dll 264KB
  • out.upx
    .dll 462KB
  • InstallDriver.exe
    .exe 18KB
  • Language/CatalogueProperties.png
    .png 64KB
  • Language/de/default.mo
    87KB
  • Language/de/default.po
    86KB
  • Language/en/default.mo
    81KB
  • Language/en/default.po
    81KB
  • Language/es/default.mo
    84KB
  • Language/es/default.po
    88KB
  • Language/fr/default.mo
    86KB
  • Language/fr/default.po
    91KB
  • Language/it/default.mo
    84KB
  • Language/it/default.po
    89KB
  • Language/pt/default.mo
    83KB
  • Language/pt/default.po
    88KB
  • Language/readme.txt
    624B
  • Language/ru/default.mo
    110KB
  • Language/ru/default.po
    115KB
  • Language/zh/default.mo
    64KB
  • Language/zh/default.po
    76KB
  • Uninstall.exe.nsis
    339KB
  • UninstallDriver.exe
    .exe 17KB
  • libeay32.dll
    .dll 1.3MB
  • libusb-1.0.dll
    .dll 223KB
  • license/license-Botan.txt
    1KB
  • license/license-OpenSSL.txt
    6KB
  • license/license-english.txt
    5KB
  • license/license-libusb.txt
    23KB
  • license/lizenz-deutsch.txt
    6KB
  • ssleay32.dll
    .dll 329KB

ArgusMonitor_Setup.exe

  • IMPHASH 61259b55b8912888e90f516ca08dc514
  • SHA256 fec06d1a20a1c6b99e9c5b90c2a7dbdaa801e1790391f81d0198bd3207a63059
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
64:ce:cd:2a:32:d0:d4:05:77:fa:30:7c:31:4c:6d:4d:1f:40:81:3d:25:b4:1a:bf:c9:30:f0:b3:5d:df:51:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=GsR 1164,CN=Argotronic eGbR,O=Argotronic eGbR,STREET=Josef-Wirth-Weg 16 a,L=Muenchen,ST=Bayern,C=DE,1.2.840.113549.1.9.1=#0c197a6572746966696b6174406172676f74726f6e69632e636f6d,1.3.6.1.4.1.311.60.2.1.1=#13084d75656e6368656e,1.3.6.1.4.1.311.60.2.1.2=#130642617965726e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
4
Entry point
13888
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths