General

  • Target
    MicroSIP-3.22.12.exe
  • Size 9.0MB
  • Sample260805-bf7neabd52
  • SHA256 505021a4561934d634afd533e7b27611094800b6668a5bfa795afbe858fe736f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 3 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • MicroSIP-3.22.12.exe
    .exe 9.0MB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    9KB
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • License.txt
    18KB
  • MicroSIP.exe
    .exe 12.6MB
  • MicroSIP.url
    49B
  • SDL2.dll
    .dll 1.1MB
  • Uninstall.exe
    .exe 492KB
  • avcodec-60.dll
    .dll 3.1MB
  • avformat-60.dll
    .dll 271KB
  • avutil-58.dll
    .dll 812KB
  • hangup.wav
    3KB
  • lame_enc.dll
    .dll 351KB
  • langpack_afrikaans.txt
    13KB
  • langpack_albanian.txt
    14KB
  • langpack_arabic.txt
    17KB
  • langpack_armenian.txt
    20KB
  • langpack_basque.txt
    14KB
  • langpack_belarusian.txt
    19KB
  • langpack_bosnian.txt
    14KB
  • langpack_breton.txt
    14KB
  • langpack_bulgarian.txt
    20KB
  • langpack_catalan.txt
    14KB
  • langpack_croatian.txt
    14KB
  • langpack_czech.txt
    14KB
  • langpack_danish.txt
    13KB
  • langpack_dutch.txt
    14KB
  • langpack_english.txt.sample
    6KB
  • langpack_esperanto.txt
    13KB
  • langpack_estonian.txt
    13KB
  • langpack_farsi.txt
    18KB
  • langpack_finnish.txt
    14KB
  • langpack_french.txt
    14KB
  • langpack_galician.txt
    14KB
  • langpack_georgian.txt
    25KB
  • langpack_german.txt
    14KB
  • langpack_germanswitzerland.txt
    14KB
  • langpack_greek.txt
    21KB
  • langpack_hebrew.txt
    16KB
  • langpack_hungarian.txt
    14KB
  • langpack_icelandic.txt
    14KB
  • langpack_indonesian.txt
    13KB
  • langpack_irish.txt
    15KB
  • langpack_italian.txt
    14KB
  • langpack_japanese.txt
    16KB
  • langpack_korean.txt
    15KB
  • langpack_kurdish.txt
    14KB
  • langpack_kyrgyz.txt
    19KB
  • langpack_latvian.txt
    14KB
  • langpack_lithuanian.txt
    14KB
  • langpack_luxembourgish.txt
    14KB
  • langpack_macedonian.txt
    20KB
  • langpack_malay.txt
    13KB
  • langpack_mongolian.txt
    20KB
  • langpack_norwegian.txt
    13KB
  • langpack_norwegiannynorsk.txt
    13KB
  • langpack_polish.txt
    14KB
  • langpack_portuguese.txt
    14KB
  • langpack_portuguesebr.txt
    14KB
  • langpack_romanian.txt
    14KB
  • langpack_russian.txt
    19KB
  • langpack_serbian.txt
    19KB
  • langpack_serbianlatin.txt
    16KB
  • langpack_simpchinese.txt
    12KB
  • langpack_slovak.txt
    14KB
  • langpack_slovenian.txt
    13KB
  • langpack_spanish.txt
    14KB
  • langpack_spanishinternational.txt
    14KB
  • langpack_swedish.txt
    14KB
  • langpack_tatar.txt
    19KB
  • langpack_thai.txt
    24KB
  • langpack_tradchinese.txt
    12KB
  • langpack_turkish.txt
    14KB
  • langpack_ukrainian.txt
    19KB
  • langpack_uzbek.txt
    14KB
  • langpack_uzbekcyrillic.txt
    20KB
  • langpack_vietnamese.txt
    16KB
  • langpack_welsh.txt
    14KB
  • msgin.wav
    5KB
  • msgout.wav
    1KB
  • ringing.wav
    78KB
  • ringing2.wav
    3KB
  • ringtone.wav
    46KB
  • swscale-7.dll
    .dll 466KB

MicroSIP-3.22.12.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 505021a4561934d634afd533e7b27611094800b6668a5bfa795afbe858fe736f
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
aa:8e:64:2a:f3:bb:bd:3d:5a:0b:e9:ed:52:5d:73:09:69:f2:b3:54:51:f1:4d:bf:21:e4:1b:93:84:d8:6a:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=MSIP Code Signing 2025
Minor OS version
0
Major OS version
4
Entry point
13650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths