General

  • Target

    db321abe2581e524a34dea5741213653412fee9670bda8193cd4becf2d2b3257

  • Size

    408KB

  • MD5

    0ea863d816a0833f0962cb46759c45d0

  • SHA1

    476421602401b091463b6893858d6125511be2fa

  • SHA256

    db321abe2581e524a34dea5741213653412fee9670bda8193cd4becf2d2b3257

  • SHA512

    298f73ac52b8c37de7809b9e386511ac960ed0418099108f50bba85a83d7ac797bd376c1af8b83174cbc72918b04021f9fed9390d6275185f1b5b504de83fb51

  • SSDEEP

    12288:Vs13iJ4ehM/U3WbsWXfAbiMzW4TzKTmFkn729zR:arErDWX8tlO729d

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • db321abe2581e524a34dea5741213653412fee9670bda8193cd4becf2d2b3257
    .rar
  • hmjtazq/JZ5U绿色下载站.url
    .url
  • hmjtazq/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • hmjtazq/skinh.she
  • hmjtazq/使用必读.url
    .url
  • hmjtazq/使用说明.txt
  • hmjtazq/回木字体安装器.exe
    .exe windows x86

    4b939f7809ba7161628685c0ebe0afbf


    Headers

    Imports

    Sections

  • hmjtazq/声明.txt