jaffacakes118_NavGear D-A-CH vers[.]1[.]2 installer[.]exe

resource
jaffacakes118_NavGear D-A-CH vers.1.2 installer.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

resource	yara_rule
sample	nsis_installer_1

jaffacakes118_NavGear D-A-CH vers.1.2 installer.exe

IMPHASH 18bc6fa81e19f21156316b1ae696ed6b
SHA256 847faae6cb73fd96b9e47cdd850d5ee58cc498fc619f36812dfcd11aa6e03a3b
MD5 9087685d50a3063c53babc1e726347e0
SHA1 861b471bde53e2fc17af97b756bd153cc562f2c9
SHA512 5d2cf0ab281e0d10dc95d1c00e019f6f670e7f28203c3faa9fd9df4218eae76467304c0478b71f6973b0f65a0eeb50ee0d3737abe44ecfd8db069f2637ed429c
SSDEEP 98304:O/STQM3ANNF6iAw/0kIhLYDiaL+zEzNmr70m4z8wcYiIUC5:MSfTw8LYDjfs+YZYi65
TLSH
T1D51633442E605507FF5F1637CA71DA6FA5E50A848A3B1FA27AB85FBE8401BE10174F22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess lstrcmpiA ExitProcess GetCommandLineA GetWindowsDirectoryA GetTempPathA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA CopyFileA

user32

ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA TrackPopupMenu ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH 57354bdeea3dfae6e948101add87501a
SHA256 120e4fac0538b7e7b75934706668063a4e7785d0405dca43fde36d55f6d968de
MD5 99bc22826a0568dce241be3a4ffd0c0d
SHA1 62e4662250abdf10d23a61076fd7cbd00a5c5b6f
SHA512 35b016b6e2dc850e5432becd57f35faf73b180c0a6f822a406cf9d5439a87126c41c49aac025cdeecd38bbd01705ddbd8c217cb33134e978ecc9624053b52be9
SSDEEP 384:sKlm7i+c3QW6ckPhyDEaLnr2bbBBIXwZ:5qi8BcyhEhLCbbTI
TLSH
T1F3421952538998F3E788013970933707AB4692266951AED1CA334FDB7A7B08D7FB5383
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10417

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LangDLL.dll

IMPHASH 2db813254ea8b4d2a92d703ecb659f39
SHA256 fab7253d54818991c18da1a9548a31bbb8970430c1c8423474bb37747d665141
MD5 d1017871e5fafca4f1a9ab0c459eb179
SHA1 84afd186e8523be52b9d7d693f9ada0e1d1758df
SHA512 f4efa4112e9c24a6bedd8063685e7f6a115ec87eeb3e0c0a463ef51dfed8a94ec7c3c146a654f39584b02b5333c038c8adff09788c8c299832d17cd71c08667c
SSDEEP 48:SHIPtcWCeM7etAo1UurdGl4A0h2TpXHWFv+wewzpv1XP3GhaEJjof2ynh1:d1cWxfzrrh2cFvWwFtSU
TLSH
T147B1967673C145FAD2A10637606B67E33A53D9303369400F9B73125A2944CA3DD3EB83
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5415

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 4ec328f99bdd944fc98d8a5cf11f7a62
SHA256 18024b3cefe128951a52ff51acd8e39daf1adc5877ccd7bc63dd205f297a76d2
MD5 02184a0759753164c0df464de83ce3df
SHA1 cdecd95d93d215897d5b5b1d3ed823f6fc591eee
SHA512 306bbd1705c0a42d61406e72c6fabe8b133a479ce1502d4436cc1b823cff82afad13b75138c31f8841af056c4e8c923c8ddfe40817049fc40351b45fc6f7a79e
SSDEEP 192:MOycJo/rJVCmIDNLU0dq5RD00lspbub76GL:i/QQ0d0RD0USq/6G
TLSH
T136224C50426042F3DD54823C09A739272BB87B249FA48EC38F9364516E199FABCBD329
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10323

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 1e9deb8667568c73f6226f615a4206fefdf197e5a24112534432de094fc2e7e2
MD5 ead88a664e510d93a7ba337bcba4fbdc
SHA1 42ffb2073b41e9b8945154f3776abb6b26003812
SHA512 29c8269db3d4d462c1a2acf47ad88aa14eaf9caeaaeddf24079d2f00028bf6de3ad3209efa5bda5993501e7f5e3252627fa57079730bf509530ee51e1d47f71a
SSDEEP 3072:f6w+PJXK6LyNbk/3lEN3XnUWSjR5+q88RtNGh8CrU01/:f6w+PhK6T3lEN3XnUWOt501/
TLSH
T110E3AA6220ABBC6918C4DE2410F7B912100EAF616CAB35B67D91F02455FBB0D7DE9C6F
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/MobileNavigator.exe

SHA256 076151ab99f129ca921f4c748779b4f043a37263b8a4ef8feefe66b6507bb64b
MD5 4e135b3b18db257089fc2fb71bfd3e31
SHA1 a400ea0cca883765e55d1424b22dd5ca66859324
SHA512 474bafea439e832aa733a1781af881568f9859cbfb172e5ca79a18a856e91ffbecc30ac4e439b3204c4da92fe4f6ca61f73412d4c3ad2b7375d1f79ae7809250
SSDEEP 24576:gXpBU0TpqVH33AniQnoSdC0s/6jAm5tq/yiGr/5luNescozMA0q07SXLHOwTYAI:2oSdC0BoKQHOwTj
TLSH
T146C52995F9405A16C5D1B67AF65D82CC730B2BB9C2FB7003ED265B3827F798A0637242
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/dach_0708000001_0708420000.lg5

SHA256 63728b0ec6bddf8372c45f76c08503adae3341909c9da5a65a3aaa82b5972a77
MD5 025bbdebb9290dc0a7b8582a97825cef
SHA1 942f4406c80f8b08a3937763e400664295d172d3
SHA512 ee2c845f4116f87e26d9b7518e19f194d8ec9f5a7dd03116c77940f11fc27525029f5d83787b425451cb9555a41be0645dfd0efe2b4e9705d3f9bbf406e316c1
TLSH
T1FAC02B9F6456808D6E50B110E334CC33466BED325D40F30ECBC565400801A043FB102F
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/dach_poicom_0708000001_0708420000.lg5

SHA256 eede6890963aa30add6cb636c22c49adb2a93dfce952c442ee7da50215cdd07c
MD5 378f77f43a79783fc0eddf7ff79484cf
SHA1 262681b81d8de377015d70f14d28702f6c5d92cb
SHA512 7b7c870bf1705c8c10d7156b8c66058f8cf99ffd4721d30cc165bba2637155b78a3d865c42324178b0295fc380912856421c33d330c980d6fd272be6cdce6f09
TLSH
T1A8C02BEF34DF003E89A00341F138CEA3F5D4D5428500EF4B09CD26003D404187DB12E0
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/de_poicom_0708000001_0708420000.lg5

SHA256 1151c1d7824052ac1f456267eec53e9cc6fef725dc0116a1721316986f2c0650
MD5 982b3ad744ee8ad041470530124fbe57
SHA1 450b7cf65bda9a50a1d27e862c9a1bcc91a2f7ca
SHA512 8918baada80af8e5bd526cdb6afda5478f6696d174a3713e800d432223169348dae6b0ea29b024c84b146a969c77bc8688bd041a24d64b2f746025219fa1ea2a
TLSH
T1F7C02BAE7C9DC40845C04181F1F0AC610B1D8E858C2CDA0E4F8CBBC50C01CC14F30476
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/device.cfg

SHA256 e54f04a6c600b63dd628a89d1f8eb58e738d2218e96b8b974ed807f118815d9c
MD5 7cdd1d1e1d7ebd5c5c511db6662a836f
SHA1 0db997d4cec09e863daeb253ea17aa015de48514
SHA512 ab38ec3b6d1c99761433973f47094967b2540a46395ea6f9d28b688412085a67d83b547c8e239c36c4b03a43e45cefb70df9d5c50134e5571eccac5c83dd57c1
SSDEEP 6144:azkP/MFOuHy49GIwYEw48kXKjRx1TTjddPPZPN:kW/M5HbxwvwjMKjJX
TLSH
T1EF348C56B56AB880E6C4CCB728A3E185E35ADFD287E1B8B06D41F901F6B50EF5E44F04
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/event_db.tmc

SHA256 7fa7398ca38e3e204934bc0fa44843a6bd103fb010f425ad675af9fd949dd5f4
MD5 d72f7b8ee70f34555147a4e4ba5f08bb
SHA1 a1164a72893c0d79c3d96d8c281fad1211ca3a8a
SHA512 c5f5b776ba65a036fdc14eea647a8980098cd4aebcd1c9273be0d58499e0daf08b70904bb89cb7518efb947bf06e6559f099ed138e51704e2797f8e923aad089
SSDEEP 6144:LxToqz9/Lm0cDpqKJGvULPkoTxPoau01nrFQ01KU2F5GvwOMrDoRGoaJOzhsLy0d:LxT9zypkVReT1RgWO85ltOgWOyhbn
TLSH
T14B254B0189CC72950E5707087A41C60FAA7C8615E6FBD8FBDB5B435C2A8AED942FED07
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/fr_poicom_0708000001_0708420000.lg5

SHA256 c151e50445f63503c20c64900069fb99d120ce994737e97145063d87d7d0ec95
MD5 2b66899f1376c76c47102329ab83564b
SHA1 81a2ad059f29016986881f1efe65830f2a97ec47
SHA512 f9c1c43010e5a19a06892a3f1ea01113ebf5dedf0688b33dd6d63e0e2bc184b97e49190c8d353a9a346edda3c63f8876a5ceba252ac1db1b0e55547b522c9b21
TLSH
T155C02BEF29578D2DD6760074B270CCA147399B228830E2CDA356B44208058401B74074
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/frbenelux_poicom_0708000001_0708420000.lg5

SHA256 87875fba8d5ce19bc8cfeaa7a362b0bbf2157402e51058be01b9b6a54fd50418
MD5 afd5ed20fc6a71af44dc2f7163a09043
SHA1 b27ddfadb257a93dc948851cfc41cce9515397d5
SHA512 4762e59f707bc1d396b91da626a12e00989028b2631ec42db1f5f09777ba871199d216082f12a11690c72ee4c1a2def4e4b8f1be1b14f46fe4f3f630e918869f
TLSH
T186C08CBBBD46C0580AE83692E23048200235EA518458F34616C82A8838874451B600E5
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/gconf.txt

SHA256 e411a5190db4e4a5ab3f6cd8185b0e44520f778764f292688d0223ffa000321b
MD5 ed0a75338f10587646c385a9b0fad6ce
SHA1 89c5d5cf96975f17ee435c922738073b5a90ea83
SHA512 b099fe4ebb4f12bd8e5a2304a7f536716cda260c83bc1b2099f9bcc907efce78083a22f58aac86a31a8171cc9d4629788e11033aa9aaefd66a8e7d8e00c80cc3
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/prefs/prefs.xml

SHA256 82e7ea39bcd0547874b0f3711647e10adc82470012e613d84182c72b3ecfa0de
MD5 bc06316ae9be942c3c43c7e1368251b0
SHA1 e2d16364e1b0c88a69932b819deb77cf5bb7b55a
SHA512 0a3067ddb5dbbc26959f64fcde43f5a919018d6512548e6ad492edb136ef0004541c25cbc2dc704e2fac70831404f49e7e88133ede741f3ee7329008d73ab28d
TLSH
T1B1116D35F4D67D2EFCE1B980B378AC969D64841352462F20E9EFA78105A63C08E8F607
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/rdat

SHA256 eea33fb3f6ecaa48dd61db939232fb3580990b39a8d3fa786ab2ef9a2b35ed64
MD5 1a37a5c7146c5f63fc7ad5d88f0fd71e
SHA1 242974eaea22ad8b22382d5b3ad5f16503c624dc
SHA512 5c5b45731a54eba7297fc58037e8a23aa696ad772bccedf2c1f0b17d13def57146ce4b6b31bd46c8e7a223a7bb9f893f1839acfa2fbbfa3d62b097a023449336
SSDEEP 49152:c2sMFu2/1uuNiihs2RAFgPYNUy0rq6VGZivJUJTpuFcwOn9ybEGb:cVQy0rq6nvJUJQWmIGb
TLSH
T134769192E965C642E06F5230C92EBDF2A3263D04D2E0C187DE5EBD48BB7B6574E41D23
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/speedwarner_che_0708000001_0708420000.lg5

SHA256 ecb54a39ce8fc5fdcd09636098c35ed5b441283d95a2e771fc207f04e4de6de9
MD5 d55a05d9df8dba546f48604350e3c415
SHA1 b148118bf272065310ed6ef8d6ce6bd56be51e35
SHA512 0c4a6bc20231a7a446b691c562220ee560f6662a338a49742329c32a0370160c9897019cebeb5e03b50d2cc683afbfe3555a7c6e7b67c8ee7ba9e341f952f24c
TLSH
T1ECC02BCB7DA504EDDCD11152E0B0CE724A6C95004580E7490ECF24C21580C001930271
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/speedwarner_deat_0708000001_0708420000.lg5

SHA256 444d8ab7febd18cd347548825199b2307dc38657cea60715bf72c70745c3d763
MD5 fcddbf5fb068f2849270dc4cb3e1dbb8
SHA1 fe63a073e31287f9aef052de24980b5679790a4a
SHA512 62bf785ed470e494c0832589c5b8cd5ee6b47e5d5320814b1c335828353aace5abfd38cbb96b1eeace7b27831114ac74894935a32dce29d55dd4fdf08f930e7f
TLSH
T1D8C02B8F3C89143CC59022A190318C131D18FB030441C20F67D9BCC31D8C8068D241E0
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/speedwarner_eu_0708000001_0708420000.lg5

SHA256 3a742df7540234d8b8174957d3c26694ddbfd83cd6be8fdd5a084a2e445bbfb0
MD5 a5fdd0f0b777e7bc8b5cb8e4f0fdd112
SHA1 851acb2c105a5c8180ab5ee63eb91875bab4e900
SHA512 9bb9491d4682022288f26aea4d9c096985ad65ade0e3c7c6a37e8f08e70a76977f11cb2e379b017c139c949a4a6869d41988b06f1ab4e1e00b597853b960d35d
TLSH
T107C02BDB3687C00D8EE60192F630CDD3819C91304804D70B8A49F0401CC9E406F30360
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/svoxdll.dll

SHA256 567e91f8b61858e09107964b2ff0deffcb25aa17b3ed4c80e3bfd95ff67f2258
MD5 fe12c2992e57f0f1801574557debedad
SHA1 954e36d67eb7ea87dc537c04e51d056800b51818
SHA512 66ab8c14bf639c334c296bde927b1a8d3c6f44e79c9ad0c2c30571729af423af631b526f21790feabee8edad94c345665f0540d56039d2c2c6a0b041fb0b6c69
SSDEEP 12288:D1yX83gJmEa9bJOsYT2CAPRl9nbdz6edxYUdp/NkMEkMSXZcxoUVKeBLL3DGR3+h:YC5YURl9nbdz6edpVkMfX+xoUgaHQ+OD
TLSH
T192F4F988BD401A1AD9E1A67DF6BE568D731307B4E2DF7006E9348E3473C685E063BD92
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/tahoma.ttf

SHA256 18e6f9f2cd7d7c4e21693b048db73bf8afef072f10da9f59f2a729d7fb82d3d5
MD5 cd0381aa3322dff4babd137f03829c8c
SHA1 28bde5b328ae7e9dade8e5e9d405210578e4d52a
SHA512 f78763c9b8f7f2858d22e9e5a89ea3224e17b1c03a22de9e940d36dc7115a2a0f156f054aaa30ac6e48e5355eed086a08e82993a96c5df6be3f82ac367754473
SSDEEP 6144:Y68p+tF7v7bmIOvTRrUeajzuFLtFbQOSTxNA1275OdJaEU:zb+rtUeyqFLtFkT/Ag5OI
TLSH
T17E84AE0BE7A39A1EFBA0757AC4507371548178ADA33743A7B98E0E38D5CE1D81B84F49
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$TEMP/pnd/sdroot/MobileNavigator/tahomabd.ttf

SHA256 f60251e9a8fdc2df8bf4a1e87616bddb77e91602012b44e7853f45dd84d72c57
MD5 a41bd5ce7554eddb34b68e39e2cb83b9
SHA1 212bc6614bb04a673ce8b93656c1dccb3415b54f
SHA512 0996e90a7b3e0764632f75a7388084b95bcb1b13b24ee31afb44b1d1fa076aeed9ccefe0e10a8de4a8699ffba1f1d87e75baa135e7dc451f2b8d4d96b7538f39
SSDEEP 6144:1GbHq0+hlrwfD6qlZeuczRxX9Tyt0lnJuHgL9Vkz16LIgaZohM:iJAl0fpeuIRnyy4HCw1689Z
TLSH
T17C74AE03E3439A1FF7A43AB6C524B3B15795F8A9473787EBB9840A6DC58F2C00784B95
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_NavGear D-A-CH vers.1.2 installer.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

$TEMP/pnd/sdroot/MobileNavigator/MobileNavigator.exe

$TEMP/pnd/sdroot/MobileNavigator/dach_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/dach_poicom_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/de_poicom_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/device.cfg

$TEMP/pnd/sdroot/MobileNavigator/event_db.tmc

$TEMP/pnd/sdroot/MobileNavigator/fr_poicom_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/frbenelux_poicom_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/gconf.txt

$TEMP/pnd/sdroot/MobileNavigator/prefs/prefs.xml

$TEMP/pnd/sdroot/MobileNavigator/rdat

$TEMP/pnd/sdroot/MobileNavigator/speedwarner_che_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/speedwarner_deat_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/speedwarner_eu_0708000001_0708420000.lg5

$TEMP/pnd/sdroot/MobileNavigator/svoxdll.dll

$TEMP/pnd/sdroot/MobileNavigator/tahoma.ttf

$TEMP/pnd/sdroot/MobileNavigator/tahomabd.ttf