General

  • Target
    ING-Antifraude-Windows.exe
  • Size 41.1MB
  • Sample260828-aky2dssamh
  • SHA256 b47c896d78a61fb5bd0f0d2b1b9db6ed2c63a30a78565d234deda49e3f23826a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • ING-Antifraude-Windows.exe
    .exe 41.1MB
  • $PLUGINSDIR/Base64.dll
    .dll 15KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll 15KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 696KB
  • $PLUGINSDIR/UAC.dll
    .dll 29KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/environment_unicode.ini
    1KB
  • $PLUGINSDIR/finish_unicode.ini
    622B
  • $PLUGINSDIR/hoststart_unicode.ini
    1KB
  • $PLUGINSDIR/ioSpecial.ini
    193B
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsArray.dll
    .dll 18KB
  • out.upx
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 187KB
  • $PLUGINSDIR/vpn_unicode.ini
    1KB
  • $PLUGINSDIR/wincheck.ini
    185B
  • tvfiles.7z
    .7z 37.1MB
  • CopyrightHOST.txt
    225KB
  • TVWebRTC.dll
    .dll 10.4MB
  • TeamViewer.exe
    .exe 65.2MB
  • TeamViewerAutomation.DataBridge.dll
    .dll 1.7MB
  • TeamViewer_Desktop.exe
    .exe 19.2MB
  • TeamViewer_Note.exe
    .exe 628KB
  • TeamViewer_Resource_ar.dll
    .dll 368KB
  • TeamViewer_Resource_bg.dll
    .dll 434KB
  • TeamViewer_Resource_cs.dll
    .dll 404KB
  • TeamViewer_Resource_da.dll
    .dll 398KB
  • TeamViewer_Resource_de.dll
    .dll 446KB
  • TeamViewer_Resource_el.dll
    .dll 473KB
  • TeamViewer_Resource_en.dll
    .dll 387KB
  • TeamViewer_Resource_es.dll
    .dll 441KB
  • TeamViewer_Resource_fi.dll
    .dll 399KB
  • TeamViewer_Resource_fr.dll
    .dll 462KB
  • TeamViewer_Resource_he.dll
    .dll 324KB
  • TeamViewer_Resource_hr.dll
    .dll 420KB
  • TeamViewer_Resource_hu.dll
    .dll 434KB
  • TeamViewer_Resource_id.dll
    .dll 405KB
  • TeamViewer_Resource_it.dll
    .dll 436KB
  • TeamViewer_Resource_ja.dll
    .dll 245KB
  • TeamViewer_Resource_ko.dll
    .dll 239KB
  • TeamViewer_Resource_lt.dll
    .dll 427KB
  • TeamViewer_Resource_nl.dll
    .dll 430KB
  • TeamViewer_Resource_no.dll
    .dll 393KB
  • TeamViewer_Resource_pl.dll
    .dll 430KB
  • TeamViewer_Resource_pt.dll
    .dll 424KB
  • TeamViewer_Resource_ro.dll
    .dll 450KB
  • TeamViewer_Resource_ru.dll
    .dll 430KB
  • TeamViewer_Resource_sk.dll
    .dll 416KB
  • TeamViewer_Resource_sr.dll
    .dll 416KB
  • TeamViewer_Resource_sv.dll
    .dll 397KB
  • TeamViewer_Resource_th.dll
    .dll 382KB
  • TeamViewer_Resource_tr.dll
    .dll 400KB
  • TeamViewer_Resource_uk.dll
    .dll 425KB
  • TeamViewer_Resource_vi.dll
    .dll 428KB
  • TeamViewer_Resource_zhCN.dll
    .dll 184KB
  • TeamViewer_Resource_zhTW.dll
    .dll 188KB
  • TeamViewer_Service.exe
    .exe 26.1MB
  • TeamViewer_StaticRes.dll
    .dll 7.6MB
  • WriteDump.exe
    .exe 502KB
  • sciter.dll
    .dll 17.2MB
  • tv_w32.dll
    .dll 158KB
  • tv_w32.exe
    .exe 367KB
  • tv_x64.dll
    .dll 189KB
  • tv_x64.exe
    .exe 440KB
  • uninstall.exe
    .exe 1.1MB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 696KB
  • $PLUGINSDIR/UAC.dll
    .dll 29KB
  • $PLUGINSDIR/UserInfo.dll
    .dll 4KB
  • $PLUGINSDIR/nsArray.dll
    .dll 18KB
  • out.upx
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • $PLUGINSDIR/uninstall_unicode.ini
    1KB
  • tvfiles_printer_WithPDFSupport_x64.7z
    .7z 518KB
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
    1KB
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
    287B
  • Printer/TeamViewer_XPSDriverFilter.gpd
    64KB
  • Printer/TeamViewer_XPSDriverFilter.inf
    1KB
  • Printer/teamviewer_xpsdriverfilter.cat
    12KB
  • Printer/x64/TeamViewer_XPSDriverFilter.dll
    .dll 1.1MB
  • tvfiles_printer_WithoutPDFSupport_x64.7z
    .7z 517KB
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
    437B
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
    267B
  • Printer/TeamViewer_XPSDriverFilter.gpd
    64KB
  • Printer/TeamViewer_XPSDriverFilter.inf
    1KB
  • Printer/teamviewer_xpsdriverfilter.cat
    12KB
  • Printer/x64/TeamViewer_XPSDriverFilter.dll
    .dll 1.1MB
  • tvfiles_printer_WithoutPDFSupport_x86.7z
    .7z 444KB
  • Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml
    437B
  • Printer/TeamViewer_XPSDriverFilter-manifest.ini
    267B
  • Printer/TeamViewer_XPSDriverFilter.gpd
    64KB
  • Printer/TeamViewer_XPSDriverFilter.inf
    1KB
  • Printer/teamviewer_xpsdriverfilter.cat
    12KB
  • Printer/x86/TeamViewer_XPSDriverFilter.dll
    .dll 911KB
  • tvfilesx64.7z
    .7z 753KB
  • x64/TVVirtualCamera_x64.dll
    .dll 2.3MB
  • x64/TVVirtualMonitorDriver.cat
    11KB
  • x64/TVVirtualMonitorDriver.dll
    .dll 70KB
  • x64/TVVirtualMonitorDriver.inf
    4KB
  • x64/TV_Audio.cat
    11KB
  • x64/TV_Audio.inf
    2KB
  • x64/TV_Audio.sy_
    .sys 180KB
  • x64/TeamViewerVPN.inf
    5KB
  • x64/TeamViewer_VirtualDeviceDriver.cat
    11KB
  • x64/TeamViewer_VirtualDeviceDriver.dll
    .dll 959KB
  • x64/TeamViewer_VirtualDeviceDriver.inf
    2KB
  • x64/VPN_Win7/TeamViewerVPN.inf
    5KB
  • x64/VPN_Win7/teamviewervpn.cat
    10KB
  • x64/VPN_Win7/teamviewervpn.sy_
    .sys 34KB
  • x64/teamviewervpn.cat
    9KB
  • x64/teamviewervpn.sy_
    .sys 45KB
  • x86/TVVirtualCamera_x86.dll
    .dll 2.2MB
  • tvfilesx86.7z
    .7z 410KB

ING-Antifraude-Windows.exe

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 b47c896d78a61fb5bd0f0d2b1b9db6ed2c63a30a78565d234deda49e3f23826a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
65:d3:0e:6c:14:6f:4a:b5:b6:fc:ed:11:39:a9:d3:6d:83:db:24:97:b1:dd:7e:4e:5f:ed:41:53:c8:3b:7a:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,C=DE
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths