f855b0097e5bafddf7509035c9abd64a373d72ccafca0bf7e51aa97089a0484a

Sharing

Copy URL

Twitter E-mail

General

Target

f855b0097e5bafddf7509035c9abd64a373d72ccafca0bf7e51aa97089a0484a
Size

7.2MB
MD5

615ff225c67235d6d4b093e58035ecfb
SHA1

4f7ea30882443a720223f97aae46e25860e1270b
SHA256

f855b0097e5bafddf7509035c9abd64a373d72ccafca0bf7e51aa97089a0484a
SHA512

8bb436aea15f2e79131c19c37f2f93f68da67235cc8d2771fb23a9f93e622850968320f8b8dd283a2e65be487683b43321605862d059e23b324a29445f4ac004
SSDEEP

196608:rN8BuRxURxK495hpHLMnXmVUeOIn/6pYi8N:rCBuRORlDpHLr+En/QS

Score

9^/10

upx aspackv2

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 8 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/Plugins/Plugin_Demo.dll	acprotect
static1/unpack001/Plugins/Plugin_Demo_VC.dll	acprotect
static1/unpack001/Plugins/SE_API.dll	acprotect
static1/unpack001/Plugins/SE_File.dll	acprotect
static1/unpack001/Plugins/SE_Std.dll	acprotect
static1/unpack001/SE_Base.dll	acprotect
static1/unpack001/Shield.dll	acprotect
static1/unpack001/Speeder.dll.disable	acprotect

ASPack v2.12-2.42 2 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/Plugins/SE_OCR.dll	aspack_v212_v242
static1/unpack001/Plugins/SE_Web.dll	aspack_v212_v242

UPX packed file 16 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Plugins/Plugin_Demo.dll	upx
static1/unpack001/Plugins/Plugin_Demo_VC.dll	upx
static1/unpack001/Plugins/SE_API.dll	upx
static1/unpack001/Plugins/SE_File.dll	upx
static1/unpack001/Plugins/SE_Std.dll	upx
static1/unpack001/SERunner.exe	upx
static1/unpack001/SETrainer.dat	upx
static1/unpack001/SE_Base.dll	upx
static1/unpack001/ScriptExpert.exe	upx
static1/unpack001/Shield.dll	upx
static1/unpack001/Speeder.dll.disable	upx
static1/unpack001/Tools/DebugTools.exe	upx
static1/unpack001/Tools/ImgStr.exe	upx
static1/unpack001/Tools/WebElementGet.exe	upx
static1/unpack001/packer.dll	upx
static1/unpack001/űʾ-Բv3.exe	upx

Files

f855b0097e5bafddf7509035c9abd64a373d72ccafca0bf7e51aa97089a0484a
.zip
CodePrompt.dat
Interface.dat
KeysMap.txt
Plugins/Fonts/base.hzf
Plugins/Fonts/base.txt
Plugins/Plugin_Demo.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AsciiToChar
CharToAscii
GetMousePos
GetSubStr
GetTickCount
Min
SE_Ext_Version
ShowMsg
UpperCase

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Plugins/Plugin_Demo.txt
Plugins/Plugin_Demo_VC.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AsciiToChar
CharToAscii
GetMousePos
GetSubStr
Min
SE_Ext_Version
ShowMsg
UpperCase
VCGetTickCount

Sections

UPX0
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Plugins/Plugin_Demo_VC.txt
Plugins/Plugin_demo_VC_source.rar
.rar
Plugin_Demo_VC.cpp
Plugin_Demo_VC.def
Plugin_Demo_VC.dsp
Plugin_Demo_VC.dsw
Plugin_Demo_VC.h
Plugin_Demo_VC.ncb
Plugin_Demo_VC.opt
Plugin_Demo_VC.plg
.html
ReadMe.txt
StdAfx.cpp
StdAfx.h
Plugins/Plugin_demo_source.rar
.rar
Plugin_demo/Plugin_Demo.cfg
Plugin_demo/Plugin_Demo.dof
Plugin_demo/Plugin_Demo.dpr
.js
Plugin_demo/Plugin_Demo.res
Plugin_demo/Plugin_Demo.~dpr
.js
Plugins/Plugins_Demo_E.rar
.rar
Plugin_Demo_E.e
Plugin_Demo_E.txt
Plugins/SE_API.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

APICall
APIClose
APIOpen
SE_Ext_Version

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Plugins/SE_API.txt
.vbs
Plugins/SE_File.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ChangeDir
ChangeFileExt
CopyFile
DeleteDir
DeleteFile
DirectoryExists
ExtractFileExt
ExtractFileName
ExtractFilePath
FileExists
ForceDir
GetCurrentDir
GetDirFiles
GetExeFileName
GetExePath
GetSpecialDir
RenameFile
SEFileAppend
SEFileAppendLn
SEFileClose
SEFileCreate
SEFileOpen
SEFileRead
SEFileReadLn
SEFileSeek
SEFileSize
SEFileWrite
SEFileWriteLn
SE_Ext_Version

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Plugins/SE_File.txt
.js
Plugins/SE_OCR.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

OcrDigit
OcrEN
OcrHZ
SE_Ext_Version

Sections

Size: 128KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 290KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Plugins/SE_OCR.txt
.vbs
Plugins/SE_Std.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AsciiToChar
CharToAscii
ClientToScreen
FloatToStr
GetClientRect
GetClipBoardText
GetCurrentProcess
GetCurrentProcessID
GetCurrentThread
GetCurrentThreadID
GetDay
GetHour
GetInputStr
GetMSec
GetMinute
GetMonth
GetMousePos
GetPriorityClass
GetSec
GetSerialNumber
GetSubStr
GetThreadPriority
GetTickCount
GetTime
GetWindowRect
GetWindowText
GetWindowThreadProcessID
GetYear
HTMLToTXT
IntToHex
IntToStr
InternetConnected
LTrim
Left
LocalComputerName
LocalIP
LowerCase
Max
Min
OpenProcess
ParamCount
ParamStr
RTrim
RegReadInteger
RegReadString
RegWriteInteger
RegWriteString
Right
SE_Ext_Version
ScreenToClient
SetClipBoardText
SetPriorityClass
SetThreadPriority
SetWindow
SetWindowText
ShowMsg
StrDuplicate
StrInsert
StrReplace
StrToFloat
StrToInt
SubStrCount
SubStrPos
SwitchToWindow
TerminateProcess
TerminateThread
Trim
TrimLeft
TrimRight
UpperCase

Sections

UPX0
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Plugins/SE_Std.txt
.vbs
Plugins/SE_Web.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

IEAlert
IEBack
IEClick
IEClose
IEForward
IEGetAttribute
IEGetHwnd
IEGetObjByHwnd
IEGetObjByTitle
IEGetObjByUrl
IEGetScrollLeft
IEGetScrollTop
IEGetSelText
IEGetTitle
IEGetUrl
IEGetVisible
IEGo
IEHeight
IEHome
IEItemExists
IEMoveBy
IEMoveTo
IENewObj
IEPrompt
IERefresh
IEResizeBy
IEResizeTo
IEScrollBy
IEScrollTo
IESetAttribute
IESetScrollLeft
IESetScrollTop
IESetVisible
IEStatus
IEValid
IEWaitComplete
IEWidth
IEconfirm
IEexecScript
SE_Ext_Version

Sections

Size: 122KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Plugins/SE_Web.txt
.vbs
Plugins/ر.txt
SERunner.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 844KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 463KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SETrainer.dat
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 844KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 463KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SETrainerEx.dat
SE_Base.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

FreeParamStr
GetParamAsFloat
GetParamAsInteger
GetParamAsStr
GetParamCount
SaveFloatToMem
SaveIntegerToMem
SaveStrToMem
SetParamAsFloat
SetParamAsInteger
SetParamAsStr

Sections

UPX0
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE_Functions.txt
.vbs
ScriptExpert.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Scripts.mht
.eml .vbs
Scripts/Demos/API/׼APIʾ.txt
.js
Scripts/Demos/API/APIʵֲҴӴھ.txt
.js
Scripts/Demos/VBScript & JavaScript/VBScriptJavaScriptʾ.txt
.vbs
Scripts/Demos/VBScript & JavaScript/ȡʱ.txt
.vbs
Scripts/Demos/VBScript & JavaScript/ȡĿ¼б.txt
.vbs
Scripts/Demos/Webҳ/IEҳ.txt
.js
Scripts/Demos/Webҳ/ʾҳԻ.txt
.js
Scripts/Demos/ͼκĻץ/ɨĻ(GetColorPos).txt
.js
Scripts/Demos/ͼκĻץ/ɨĻ(IfMoveToColor).txt
Scripts/Demos/ͼκĻץ/ɨĻ.txt
.js
Scripts/Demos/ͼκĻץ/ͼʶ1.txt
Scripts/Demos/ͼκĻץ/ͼʶ2.txt
.js
Scripts/Demos/ͼκĻץ/ʾץű.txt
Scripts/Demos/ͼκĻץ/ʾץڴű.txt
Scripts/Demos//1-0.1.txt
Scripts/Demos//2-0.5.txt
Scripts/Demos//3-ԭ.txt
Scripts/Demos//4-2.txt
Scripts/Demos//5-5.txt
Scripts/Demos//6-10.txt
Scripts/Demos//7-50.txt
Scripts/Demos//ò.txt
.js
Scripts/Demos//ļдʾ.txt
.vbs
Scripts/Demos//Include_1.inc
.vbs
Scripts/Demos//Include_2.inc
Scripts/Demos//Includeʾ.txt
.js
Scripts/Demos//תӳ.txt
.js
Scripts/Demos//ʾFORѭ.txt
Scripts/Demos//ʾIF..ELSEIF..ELSE..ENDṹ.txt
.js
Scripts/Demos//ʾWHILEѭ.txt
Scripts/Demos/ʱ/ʱʾű.txt
.js
Scripts/Demos//ⲿߴĵ.txt
Scripts/Demos//ȡ굱ǰλ.txt
.js
Scripts/Demos//Ʒ.txt
Scripts/Demos//1.txt
.js
Scripts/Demos//2.txt
.js
Scripts/Demos//궯.txt
.js
Scripts/Demos//16ֵ.txt
.js
Scripts/Demos//ַ.txt
.js
Scripts/Demos/ֵ/ʹ.txt
.vbs
Scripts/Demos/ֵ/Բ.txt
.js
Scripts/Demos/ֵ/.txt
.js
Scripts/Demos/Ϣ/ʾ1Ϣ.txt
Scripts/Demos/Ϣ/ʾ1Ϣ.txt
.js
Scripts/Demos/Ϣ/ʾ2Ϣ.txt
.vbs
Scripts/Demos/Ϣ/ʾ2Ϣ.txt
.js
Scripts/Demos/Ϣ/ʾ3Ϣѭ.txt
.js
Scripts/Demos/Ϣ/ʾ3Ϣ.txt
Scripts/Demos/ʶ/ʶʾ.txt
.js
Scripts/Demos/Զ/Զ-ʾҳ.txt
Scripts/Demos/Զ/Զ-ʾʾDebugMsgϢ.txt
Scripts/Demos/Զ/Զ-ʾעActiveX.txt
.vbs
Scripts/Demos/Զ/Զ-ʾС֪ͨ.txt
Scripts/INIļд.txt
.js
Scripts/עд.txt
.js
Scripts/ʱʾű.txt
.js
Scripts/жʾ.txt
.js
Scripts/ϼ.txt
Scripts/űʾ.txt
.js
Scripts/Զ庯͹.txt
.vbs
Scripts/ץű.txt
.js
Shield.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ChangeMode
LoadShield
UnloadShield

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Speeder.dll.disable
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DisableSpeeder
EnableSpeeder
SetSpeed

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Speeder.txt
Tools/DebugTools.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tools/ImgStr.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tools/WebElementGet.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gwiopm.sys
.exe windows x86

30246d54430361bf28ee1ad81b82a76e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteSymbolicLink
Ke386IoSetAccessProcess
IoGetCurrentProcess
Ke386QueryIoAccessMap
IofCompleteRequest
IoDeleteDevice
Ke386SetIoAccessMap
RtlInitUnicodeString
MmFreeNonCachedMemory
IoCreateSymbolicLink
IoCreateDevice
MmAllocateNonCachedMemory

Sections

.text
Size: 960B - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 382B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
packer.dll
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ʹø˵.txt
űʾ-Բv3.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
űʦűʦScript Expert V7.5Ѱ_ - pc6վ.url
.url

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 60KB

UPX1 Size: 27KB - Virtual size: 28KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

File Characteristics

Sections

CODE Size: 45KB - Virtual size: 44KB

DATA Size: 1KB - Virtual size: 1KB

BSS Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 242B

.reloc Size: 4KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 5KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 276KB

UPX1 Size: 68KB - Virtual size: 68KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 64KB

UPX1 Size: 28KB - Virtual size: 32KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

File Characteristics

Sections

CODE Size: 47KB - Virtual size: 46KB

DATA Size: 1KB - Virtual size: 1KB

BSS Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 131B

.reloc Size: 4KB - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 5KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 220KB

UPX1 Size: 133KB - Virtual size: 136KB

.rsrc Size: 5KB - Virtual size: 8KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 128KB - Virtual size: 300KB

Size: 8KB - Virtual size: 12KB

Size: - Virtual size: 8KB

Size: 7KB - Virtual size: 8KB

Size: 512B - Virtual size: 4KB

Size: 11KB - Virtual size: 20KB

.rsrc Size: 12KB - Virtual size: 12KB

.data Size: 290KB - Virtual size: 292KB

.adata Size: - Virtual size: 4KB

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 252KB

UPX1 Size: 143KB - Virtual size: 144KB

.rsrc Size: 6KB - Virtual size: 8KB

Headers

UPX0
Size: - Virtual size: 60KB

UPX1
Size: 27KB - Virtual size: 28KB

.rsrc
Size: 2KB - Virtual size: 4KB

CODE
Size: 45KB - Virtual size: 44KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 242B

.reloc
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 5KB

UPX0
Size: - Virtual size: 276KB

UPX1
Size: 68KB - Virtual size: 68KB

UPX2
Size: 512B - Virtual size: 4KB

UPX0
Size: - Virtual size: 64KB

UPX1
Size: 28KB - Virtual size: 32KB

.rsrc
Size: 2KB - Virtual size: 4KB

CODE
Size: 47KB - Virtual size: 46KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 131B

.reloc
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 5KB

UPX0
Size: - Virtual size: 220KB

UPX1
Size: 133KB - Virtual size: 136KB

.rsrc
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 12KB

.data
Size: 290KB - Virtual size: 292KB

.adata
Size: - Virtual size: 4KB

UPX0
Size: - Virtual size: 252KB

UPX1
Size: 143KB - Virtual size: 144KB

.rsrc
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 16KB

.data
Size: 289KB - Virtual size: 292KB

.adata
Size: - Virtual size: 4KB

UPX0
Size: - Virtual size: 844KB

UPX1
Size: 463KB - Virtual size: 464KB

.rsrc
Size: 11KB - Virtual size: 12KB

UPX0
Size: - Virtual size: 844KB

UPX1
Size: 463KB - Virtual size: 464KB

.rsrc
Size: 11KB - Virtual size: 12KB

UPX0
Size: - Virtual size: 208KB

UPX1
Size: 116KB - Virtual size: 120KB

.rsrc
Size: 3KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 3.0MB

UPX1
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 40KB - Virtual size: 44KB

UPX0
Size: - Virtual size: 64KB

UPX1
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 2KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 44KB

UPX1
Size: 21KB - Virtual size: 24KB

.rsrc
Size: 1024B - Virtual size: 4KB