General

  • Target
    incoSAT.exe
  • Size 29.4MB
  • Sample260930-w3dztsybph
  • SHA256 7c8eaabfd0090fae790b97cfc8659d1084f6214ddbf9e814fdcb90af313dd447
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • incoSAT.exe
    .exe 29.4MB
  • $PLUGINSDIR/CustomerTools.dll
    .dll 1001KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 696KB
  • $PLUGINSDIR/nsJSON.dll
    .dll 30KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 187KB
  • $PLUGINSDIR/wincheck.ini
    185B
  • $_6_/tvqsfiles.7z
    .7z 28.3MB
  • CopyrightQS.txt
    163KB
  • TeamViewer.exe
    .exe 60.9MB
  • TeamViewer_Desktop.exe
    .exe 13.1MB
  • TeamViewer_Note.exe
    .exe 560KB
  • TeamViewer_Resource_ar.dll
    .dll 364KB
  • TeamViewer_Resource_bg.dll
    .dll 428KB
  • TeamViewer_Resource_cs.dll
    .dll 399KB
  • TeamViewer_Resource_da.dll
    .dll 393KB
  • TeamViewer_Resource_de.dll
    .dll 440KB
  • TeamViewer_Resource_el.dll
    .dll 467KB
  • TeamViewer_Resource_en.dll
    .dll 383KB
  • TeamViewer_Resource_es.dll
    .dll 436KB
  • TeamViewer_Resource_fi.dll
    .dll 394KB
  • TeamViewer_Resource_fr.dll
    .dll 456KB
  • TeamViewer_Resource_he.dll
    .dll 321KB
  • TeamViewer_Resource_hr.dll
    .dll 415KB
  • TeamViewer_Resource_hu.dll
    .dll 429KB
  • TeamViewer_Resource_id.dll
    .dll 401KB
  • TeamViewer_Resource_it.dll
    .dll 431KB
  • TeamViewer_Resource_ja.dll
    .dll 242KB
  • TeamViewer_Resource_ko.dll
    .dll 237KB
  • TeamViewer_Resource_lt.dll
    .dll 422KB
  • TeamViewer_Resource_nl.dll
    .dll 425KB
  • TeamViewer_Resource_no.dll
    .dll 388KB
  • TeamViewer_Resource_pl.dll
    .dll 425KB
  • TeamViewer_Resource_pt.dll
    .dll 418KB
  • TeamViewer_Resource_ro.dll
    .dll 444KB
  • TeamViewer_Resource_ru.dll
    .dll 425KB
  • TeamViewer_Resource_sk.dll
    .dll 411KB
  • TeamViewer_Resource_sr.dll
    .dll 411KB
  • TeamViewer_Resource_sv.dll
    .dll 392KB
  • TeamViewer_Resource_th.dll
    .dll 378KB
  • TeamViewer_Resource_tr.dll
    .dll 396KB
  • TeamViewer_Resource_uk.dll
    .dll 420KB
  • TeamViewer_Resource_vi.dll
    .dll 424KB
  • TeamViewer_Resource_zhCN.dll
    .dll 183KB
  • TeamViewer_Resource_zhTW.dll
    .dll 184KB
  • TeamViewer_Service.exe
    .exe 17.1MB
  • TeamViewer_StaticRes.dll
    .dll 9.1MB
  • WriteDump.exe
    .exe 413KB
  • tv_w32.dll
    .dll 483KB
  • tv_w32.exe
    .exe 338KB
  • tv_x64.dll
    .dll 613KB
  • tv_x64.exe
    .exe 399KB
  • uninstall.exe
    .exe 327KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 696KB
  • $_6_/tvqsfilesx64.7z
    .7z 11KB
  • x64/TVMonitor.inf
    1KB
  • x64/TVMonitor.sy_
    .sys 17KB
  • x64/tvmonitor.cat
    8KB
  • $_6_/tvqsfilesx86.7z
    .7z 9KB
  • x86/TVMonitor.inf
    1KB
  • x86/TVMonitor.sy_
    .sys 14KB
  • x86/tvmonitor.cat
    8KB

incoSAT.exe

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 7c8eaabfd0090fae790b97cfc8659d1084f6214ddbf9e814fdcb90af313dd447
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:00:de:c6:02:e5:5b:45:20:a2:d8:66:86:49:42:37:2f:81:c6:9c:20:c6:e2:0c:a7:10:f9:38:d6:e7:01:89
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths