5c756189c660d30a6f38721e37f6a1261a706aca1989a121707b1631e2b50692 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c756189c660d30a6f38721e37f6a1261a706aca1989a121707b1631e2b50692
Size

1.3MB
MD5

5e0e57169e146926ca2a86cd4f9f120e
SHA1

1aa69cc15bf5cb493672146693737e40dd31ea56
SHA256

5c756189c660d30a6f38721e37f6a1261a706aca1989a121707b1631e2b50692
SHA512

92080e56a28dfd6a779d5066631b59133f5f3328f4ab68774b7b8c867d11ff8f73635ca4f601eddd2a862579bd51bd4c2245db94a284609f1b0ae5b0b391d230
SSDEEP

24576:sb6LIeQzmP5+B1iuW/LHnPqoH68mJkW9h3CFxgsjeknFc7olQqSno8XhO5v:e0UzH1i7P76T9h3Fs6eckl1So8XY

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/bugoodomainV1.3.1/BugooDomainCore.dll	acprotect

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/bugoodomainV1.3.1/BugooDomainCore.dll	upx
static1/unpack001/bugoodomainV1.3.1/bugoodomain.exe	upx

Files

5c756189c660d30a6f38721e37f6a1261a706aca1989a121707b1631e2b50692
.rar .ps1
bugoodomainV1.3.1/BugooDomainCore.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GetRandom

Sections

UPX0
Size: - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 717KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bugoodomainV1.3.1/bugoodomain.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bugoodomainV1.3.1/下载安装说明.txt
bugoodomainV1.3.1/未来软件园-首页.url
.url