General

  • Target
    Fernwartung_Retter-edv.exe
  • Size 20.7MB
  • Sample261110-pmqkcsfd46
  • SHA256 4501962efe237f55c88858106a5588e3ea9a259de8acda3b789e405a643fc507
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 45 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Fernwartung_Retter-edv.exe
    .exe 20.7MB
  • $PLUGINSDIR/CustomerTools.dll
    .dll 831KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 228KB
  • $PLUGINSDIR/nsJSON.dll
    .dll 18KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 175KB
  • $PLUGINSDIR/wincheck.ini
    185B
  • $_6_/tvqsfiles.7z
    .7z 19.7MB
  • CopyRights_DE.txt
    55KB
  • CopyRights_EN.txt
    55KB
  • TeamViewer.exe
    .exe 40.5MB
  • TeamViewer_Desktop.exe
    .exe 10.7MB
  • TeamViewer_Note.exe
    .exe 569KB
  • TeamViewer_Resource_ar.dll
    .dll 339KB
  • TeamViewer_Resource_bg.dll
    .dll 398KB
  • TeamViewer_Resource_cs.dll
    .dll 370KB
  • TeamViewer_Resource_da.dll
    .dll 363KB
  • TeamViewer_Resource_de.dll
    .dll 408KB
  • TeamViewer_Resource_el.dll
    .dll 435KB
  • TeamViewer_Resource_en.dll
    .dll 356KB
  • TeamViewer_Resource_es.dll
    .dll 404KB
  • TeamViewer_Resource_fi.dll
    .dll 366KB
  • TeamViewer_Resource_fr.dll
    .dll 424KB
  • TeamViewer_Resource_he.dll
    .dll 296KB
  • TeamViewer_Resource_hr.dll
    .dll 387KB
  • TeamViewer_Resource_hu.dll
    .dll 398KB
  • TeamViewer_Resource_id.dll
    .dll 371KB
  • TeamViewer_Resource_it.dll
    .dll 403KB
  • TeamViewer_Resource_ja.dll
    .dll 223KB
  • TeamViewer_Resource_ko.dll
    .dll 217KB
  • TeamViewer_Resource_lt.dll
    .dll 393KB
  • TeamViewer_Resource_nl.dll
    .dll 394KB
  • TeamViewer_Resource_no.dll
    .dll 361KB
  • TeamViewer_Resource_pl.dll
    .dll 395KB
  • TeamViewer_Resource_pt.dll
    .dll 388KB
  • TeamViewer_Resource_ro.dll
    .dll 412KB
  • TeamViewer_Resource_ru.dll
    .dll 394KB
  • TeamViewer_Resource_sk.dll
    .dll 382KB
  • TeamViewer_Resource_sr.dll
    .dll 382KB
  • TeamViewer_Resource_sv.dll
    .dll 363KB
  • TeamViewer_Resource_th.dll
    .dll 353KB
  • TeamViewer_Resource_tr.dll
    .dll 369KB
  • TeamViewer_Resource_uk.dll
    .dll 391KB
  • TeamViewer_Resource_vi.dll
    .dll 398KB
  • TeamViewer_Resource_zhCN.dll
    .dll 167KB
  • TeamViewer_Resource_zhTW.dll
    .dll 168KB
  • TeamViewer_Service.exe
    .exe 9.7MB
  • TeamViewer_StaticRes.dll
    .dll 6.7MB
  • dpa-de.html
    .html 14KB
  • dpa-en.html
    .html 14KB
  • eula-de.html
    .html 85KB
  • eula-en.html
    .html 79KB
  • tv_w32.dll
    .dll 415KB
  • tv_w32.exe
    .exe 344KB
  • tv_x64.dll
    .dll 527KB
  • tv_x64.exe
    .exe 409KB
  • uninstall.exe
    .exe 425KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/TvGetVersion.dll
    .dll 228KB
  • $_6_/tvqsfilesx64.7z
    .7z 11KB
  • x64/TVMonitor.inf
    1KB
  • x64/TVMonitor.sy_
    .sys 17KB
  • x64/tvmonitor.cat
    8KB
  • $_6_/tvqsfilesx86.7z
    .7z 9KB
  • x86/TVMonitor.inf
    1KB
  • x86/TVMonitor.sy_
    .sys 14KB
  • x86/tvmonitor.cat
    8KB

Fernwartung_Retter-edv.exe

  • IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
  • SHA256 4501962efe237f55c88858106a5588e3ea9a259de8acda3b789e405a643fc507
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
79:08:85:1a:74:ad:04:50:51:b0:58:1f:b0:54:ff:10:93:79:f6:e5:f8:a8:7e:80:fc:96:e9:f1:fb:eb:02:9f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

PE Signature issue

Digest
5c:9b:6d:ec:21:d6:a4:06:6d:ed:0a:11:ba:69:cb:c2:8e:66:9c:bd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=TeamViewer Germany GmbH,O=TeamViewer Germany GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE
Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths