General

  • Target
    nect-win.exe
  • Size 15.3MB
  • Sample260924-pc8m7ade89
  • SHA256 dc5cd86b6f6ef5d89f031d6118c6405c234ffe91a0223ddba316d4370ea13fa6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 43 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • nect-win.exe
    .exe 15.3MB
  • $PLUGINSDIR/CustomerTools.dll
    .dll 831KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 228KB
  • $PLUGINSDIR/nsJSON.dll
    .dll 18KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 175KB
  • $PLUGINSDIR/wincheck.ini
    185B
  • $_6_/tvqsfiles.7z
    .7z 14.3MB
  • TeamViewer.exe
    .exe 32.4MB
  • TeamViewer_Desktop.exe
    .exe 9.4MB
  • TeamViewer_Note.exe
    .exe 665KB
  • TeamViewer_Resource_ar.dll
    .dll 273KB
  • TeamViewer_Resource_bg.dll
    .dll 320KB
  • TeamViewer_Resource_cs.dll
    .dll 298KB
  • TeamViewer_Resource_da.dll
    .dll 293KB
  • TeamViewer_Resource_de.dll
    .dll 331KB
  • TeamViewer_Resource_el.dll
    .dll 353KB
  • TeamViewer_Resource_en.dll
    .dll 288KB
  • TeamViewer_Resource_es.dll
    .dll 327KB
  • TeamViewer_Resource_fi.dll
    .dll 294KB
  • TeamViewer_Resource_fr.dll
    .dll 344KB
  • TeamViewer_Resource_he.dll
    .dll 239KB
  • TeamViewer_Resource_hr.dll
    .dll 311KB
  • TeamViewer_Resource_hu.dll
    .dll 320KB
  • TeamViewer_Resource_id.dll
    .dll 300KB
  • TeamViewer_Resource_it.dll
    .dll 326KB
  • TeamViewer_Resource_ja.dll
    .dll 177KB
  • TeamViewer_Resource_ko.dll
    .dll 173KB
  • TeamViewer_Resource_lt.dll
    .dll 318KB
  • TeamViewer_Resource_nl.dll
    .dll 318KB
  • TeamViewer_Resource_no.dll
    .dll 291KB
  • TeamViewer_Resource_pl.dll
    .dll 319KB
  • TeamViewer_Resource_pt.dll
    .dll 313KB
  • TeamViewer_Resource_ro.dll
    .dll 334KB
  • TeamViewer_Resource_ru.dll
    .dll 315KB
  • TeamViewer_Resource_sk.dll
    .dll 306KB
  • TeamViewer_Resource_sr.dll
    .dll 308KB
  • TeamViewer_Resource_sv.dll
    .dll 292KB
  • TeamViewer_Resource_th.dll
    .dll 285KB
  • TeamViewer_Resource_tr.dll
    .dll 299KB
  • TeamViewer_Resource_uk.dll
    .dll 313KB
  • TeamViewer_Resource_vi.dll
    .dll 324KB
  • TeamViewer_Resource_zhCN.dll
    .dll 131KB
  • TeamViewer_Resource_zhTW.dll
    .dll 132KB
  • TeamViewer_Service.exe
    .exe 8.7MB
  • TeamViewer_StaticRes.dll
    .dll 5.8MB
  • tv_w32.dll
    .dll 402KB
  • tv_w32.exe
    .exe 188KB
  • tv_x64.dll
    .dll 511KB
  • tv_x64.exe
    .exe 217KB
  • uninstall.exe
    .exe 445KB
  • $PLUGINSDIR/FindProcDLL.dll
    .dll 27KB
  • $PLUGINSDIR/KillProcDLL.dll
    .dll 36KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 228KB
  • $_6_/tvqsfilesx64.7z
    .7z 11KB
  • x64/TVMonitor.inf
    1KB
  • x64/TVMonitor.sy_
    .sys 17KB
  • x64/tvmonitor.cat
    8KB
  • $_6_/tvqsfilesx86.7z
    .7z 9KB
  • x86/TVMonitor.inf
    1KB
  • x86/TVMonitor.sy_
    .sys 14KB
  • x86/tvmonitor.cat
    8KB

nect-win.exe

  • IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
  • SHA256 dc5cd86b6f6ef5d89f031d6118c6405c234ffe91a0223ddba316d4370ea13fa6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
69:2f:ca:0a:c5:fe:58:07:18:33:d5:bc:0f:31:65:cb:6a:34:10:c0:86:61:52:ac:d7:fd:0a:86:d0:d9:2d:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
Digest
d9:fc:c7:22:43:06:52:7e:35:e9:df:87:12:2f:d4:01:c5:76:f9:05
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths