Analyzing...

File Name: 3dp_chip_lite_v1804.exe

SHA1: de0b6921ae150abf25641c0d3d63e00ff9f3a9c4

MD5: d5a6fafe036062918d9066835ee7087e

First Seen Date: 2018-05-15 22:42:44.917103 ( 2018-05-15 22:42:44.917103 )

Number of Clients Seen: 7

Last Analysis Date: 2018-05-15 22:42:44.917103 ( 2018-05-15 22:42:44.917103 )

Human Expert Analysis Result: No human expert analysis verdict given to this sample yet.

Analysis Summary

Analysis Type	Date	Verdict
Signature Based Detection	2018-05-15 22:42:44.917103	Malware
Static Analysis Overall Verdict	2018-05-15 22:42:44.917103	No Threat Found
Dynamic Analysis Overall Verdict	2018-05-15 22:42:44.917103	No Threat Found
Precise Detectors Overall Verdict	2018-05-15 22:42:44.917103	No Match

Static Analysis

Static Analysis Overall Verdict	Result
No Threat Found

Detector	Result
Optional Header LoaderFlags field is valued illegal	Clean
Non-ascii or empty section names detected	Clean
Illegal size of optional Header	Clean
Packer detection on signature database	Unknown
Based on the sections entropy check! file is possibly packed	Clean
Timestamp value suspicious	Clean
Header Checksum is zero!	Clean
Enrty point is outside the 1st(.code) section! Binary is possibly packed	Clean
Optional Header NumberOfRvaAndSizes field is valued illegal	Clean
Anti-vm present	Clean
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger	Suspicious
TLS callback functions array detected	Clean

Dynamic Analysis

Dynamic Analysis Overall Verdict	Result
No Threat Found

Suspicious Behaviors
Opens a file in a system directory
Logs user key strokes

Behavioral Information

LoadLibrary

SHFOLDER

ole32.dll

comctl32.dll

ADVAPI32.dll

SHELL32.dll

propsys.dll

ntmarta.dll

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\LangDLL.dll

UxTheme.dll

C:\Windows\system32\ole32.dll

C:\Windows\syswow64\MSCTF.dll

OLEAUT32.DLL

t r0

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\Fusion.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\Fusion.ENU

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\Fusion.EN

kernel32

RichEd20

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\InstallOptions.dll

IMM32.dll

C:\Windows\system32\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\StartMenu.dll

CreateMutex

<NULL>

DeleteFile

C:\Users\win7\AppData\Local\Temp\nscE0C2.tmp

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp

OpenMutex

Local\MSCTF.Asm.MutexDefault1

DefaultTabtip-MainUI

WriteFile

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\Fusion.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\System.dll

C:\3dp_chip_lite_v1804.exe

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\StartMenu.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\modern-wizard.bmp

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\ioSpecial.ini

C:\Users\win7\AppData\Local\Temp\nssE0D3.tmp

ReadFile

C:\Users\win7\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db

C:\3dp_chip_lite_v1804.exe

C:\Users\win7\AppData\Local\Temp\nssE0D3.tmp

C:\Windows\Fonts\staticcache.dat

C:\

C:\Users\desktop.ini

QueryFilePath

C:\3dp_chip_lite_v1804.exe

C:\Users\win7\AppData\Local\Temp\nsxE0F3.tmp\Fusion.dll

C:\Windows\syswow64\MSCTF.dll

C:\Windows\syswow64\USER32.dll

C:\Windows\system32\RichEd20.DLL

OpenRegistryKey

\REGISTRY\MACHINE\SOFTWARE\M

\REGISTRY\MACHINE\SOFTWARE\Microsoft

Precise Detectors Analysis Results

Detector Name	Date	Verdict	Reason
Static Precise PUA Detector 1	2018-05-15 22:42:41.579921	No Match	NotDetected
Static Precise Trojan Detector 5	2018-05-15 22:42:41.580048	No Match	NotDetected
Static Precise Trojan Detector 7	2018-05-15 22:42:41.579793	No Match	NotDetected
Static Precise PUA Detector 4	2018-05-15 22:42:41.601645	No Match	NotDetected
Static Precise PUA Detector 5	2018-05-15 22:42:41.602491	No Match	NotDetected
Static Precise Trojan Detector 1	2018-05-15 22:42:41.602596	No Match	NotDetected
Static Precise Trojan Detector 2	2018-05-15 22:42:41.633913	No Match	NotDetected
Static Precise Trojan Detector 3	2018-05-15 22:42:41.632682	No Match	NotDetected
Static Precise Trojan Detector 12	2018-05-15 22:42:41.649339	No Match	NotDetected
Static Precise Trojan Detector 10	2018-05-15 22:42:41.659324	No Match	NotDetected
Static Precise Virus Detector 1	2018-05-15 22:42:41.672324	No Match	NotDetected
Static Precise Virus Detector 2	2018-05-15 22:42:41.685862	No Match	NotDetected