General

  • Target
    TeamViewer.exe
  • Size 15.2MB
  • Sample260804-pg8hzsem41
  • SHA256 618cf871f4836b4b53e2cf8a8c46d6d3313631528794beec0740fdb73d8f53d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 45 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • TeamViewer.exe
    .exe 15.2MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 210KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 175KB
  • $PLUGINSDIR/wincheck.ini
    185B
  • $_6_/tvqsfiles.7z
    .7z 14.3MB
  • TeamViewer.exe
    .exe 32.4MB
  • TeamViewer_Desktop.exe
    .exe 9.4MB
  • TeamViewer_Note.exe
    .exe 662KB
  • TeamViewer_Resource_ar.dll
    .dll 269KB
  • TeamViewer_Resource_bg.dll
    .dll 314KB
  • TeamViewer_Resource_cs.dll
    .dll 292KB
  • TeamViewer_Resource_da.dll
    .dll 288KB
  • TeamViewer_Resource_de.dll
    .dll 325KB
  • TeamViewer_Resource_el.dll
    .dll 350KB
  • TeamViewer_Resource_en.dll
    .dll 284KB
  • TeamViewer_Resource_es.dll
    .dll 321KB
  • TeamViewer_Resource_fi.dll
    .dll 291KB
  • TeamViewer_Resource_fr.dll
    .dll 339KB
  • TeamViewer_Resource_he.dll
    .dll 235KB
  • TeamViewer_Resource_hr.dll
    .dll 305KB
  • TeamViewer_Resource_hu.dll
    .dll 315KB
  • TeamViewer_Resource_id.dll
    .dll 296KB
  • TeamViewer_Resource_it.dll
    .dll 322KB
  • TeamViewer_Resource_ja.dll
    .dll 172KB
  • TeamViewer_Resource_ko.dll
    .dll 168KB
  • TeamViewer_Resource_lt.dll
    .dll 314KB
  • TeamViewer_Resource_nl.dll
    .dll 313KB
  • TeamViewer_Resource_no.dll
    .dll 287KB
  • TeamViewer_Resource_pl.dll
    .dll 314KB
  • TeamViewer_Resource_pt.dll
    .dll 307KB
  • TeamViewer_Resource_ro.dll
    .dll 331KB
  • TeamViewer_Resource_ru.dll
    .dll 309KB
  • TeamViewer_Resource_sk.dll
    .dll 302KB
  • TeamViewer_Resource_sr.dll
    .dll 303KB
  • TeamViewer_Resource_sv.dll
    .dll 287KB
  • TeamViewer_Resource_th.dll
    .dll 282KB
  • TeamViewer_Resource_tr.dll
    .dll 295KB
  • TeamViewer_Resource_uk.dll
    .dll 308KB
  • TeamViewer_Resource_vi.dll
    .dll 322KB
  • TeamViewer_Resource_zhCN.dll
    .dll 126KB
  • TeamViewer_Resource_zhTW.dll
    .dll 127KB
  • TeamViewer_Service.exe
    .exe 8.7MB
  • TeamViewer_StaticRes.dll
    .dll 5.8MB
  • tv_w32.dll
    .dll 399KB
  • tv_w32.exe
    .exe 185KB
  • tv_x64.dll
    .dll 507KB
  • tv_x64.exe
    .exe 213KB
  • uninstall.exe
    .exe 434KB
  • $PLUGINSDIR/FindProcDLL.dll
    .dll 27KB
  • $PLUGINSDIR/KillProcDLL.dll
    .dll 36KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 210KB
  • $_6_/tvqsfilesx64.7z
    .7z 11KB
  • x64/TVMonitor.inf
    1KB
  • x64/TVMonitor.sy_
    .sys 17KB
  • x64/tvmonitor.cat
    8KB
  • $_6_/tvqsfilesx86.7z
    .7z 9KB
  • x86/TVMonitor.inf
    1KB
  • x86/TVMonitor.sy_
    .sys 14KB
  • x86/tvmonitor.cat
    8KB

TeamViewer.exe

  • IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
  • SHA256 618cf871f4836b4b53e2cf8a8c46d6d3313631528794beec0740fdb73d8f53d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

Digest
50:f9:05:7c:9a:d5:a1:93:a8:97:2d:a7:57:d2:e7:21:33:c1:3c:3e:75:05:9f:71:56:68:6d:81:a9:a5:8e:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

PE Signature issue

Digest
2f:6f:e1:55:0c:81:ef:6c:df:2a:51:f3:cb:17:bb:f8:c8:99:ef:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths