Overview

overview

9

Static

static

9

HugeCalc.dll

windows7-x64

1

HugeCalc.dll

windows10-2004-x64

1

cfunc.dll

windows7-x64

3

cfunc.dll

windows10-2004-x64

3

mycalc.exe

windows7-x64

1

mycalc.exe

windows10-2004-x64

1

tools/32λ...17.exe

windows7-x64

1

tools/32λ...17.exe

windows10-2004-x64

1

tools/ʵ�...lc.exe

windows7-x64

1

tools/ʵ�...lc.exe

windows10-2004-x64

1

tools/�...lc.chm

windows7-x64

1

tools/�...lc.chm

windows10-2004-x64

1

tools/�...lc.dll

windows7-x64

1

tools/�...lc.dll

windows10-2004-x64

8

tools/�...lc.exe

windows7-x64

8

tools/�...lc.exe

windows10-2004-x64

8

tools/�...13.exe

windows7-x64

1

tools/�...13.exe

windows10-2004-x64

1

tools/�...10.exe

windows7-x64

1

tools/�...10.exe

windows10-2004-x64

1

tools/�...ac.exe

windows7-x64

1

tools/�...ac.exe

windows10-2004-x64

1

tools/�...al.exe

windows7-x64

9

tools/�...al.exe

windows10-2004-x64

9

tools/�...sa.dll

windows7-x64

8

tools/�...sa.dll

windows10-2004-x64

8

tools/�...md.dll

windows7-x64

1

tools/�...md.dll

windows10-2004-x64

1

tools/�...md.dll

windows7-x64

1

tools/�...md.dll

windows10-2004-x64

8

tools/�...ce.exe

windows7-x64

8

tools/�...ce.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c46fac609d2f425e5ead4a9495e3610a18e4ea22385d358883f59b5a43aa0640

  • Size

    2.5MB

  • MD5

    000c46865408696e1b3453654bff15af

  • SHA1

    2b1c4b50aaf03f1aa7713897933c0af410249f47

  • SHA256

    c46fac609d2f425e5ead4a9495e3610a18e4ea22385d358883f59b5a43aa0640

  • SHA512

    583a53174bdbb301ed78afa212648ab7a60d59ed0a081e79fde727dc3a2be1da487b87cedb6bdd923f1b0d30303f7216133dfaeec5fb2d16a0a284af929a80d1

  • SSDEEP

    49152:mWjJxeKuSvH2RSFBQq6ao7vIfgQKNaFpzBj5i9ZF0fQJjEYB:5xeKuSeqovlQKMzBjAZi4Jwo

Score
9/10
upxaspackv2

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 5 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • c46fac609d2f425e5ead4a9495e3610a18e4ea22385d358883f59b5a43aa0640
    .zip
  • HugeCalc.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • cfunc.dll
    .dll windows x86

    d752e294794bde96faeb4ce0eb29fe2e


    Headers

    Imports

    Exports

    Sections

  • mycalc.exe
    .exe windows x86


    Headers

    Sections

  • tools/32λ16Ƽ/Calc17.exe
    .exe windows x86


    Headers

    Sections

  • tools/ʵü/calc.exe
    .exe windows x86


    Headers

    Sections

  • tools//HugeCalc.chm
    .chm
  • tools//HugeCalc.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • tools//HugeCalc.exe
    .exe windows x86


    Headers

    Sections

  • tools/Ƽ/fycalcb13.exe
    .exe windows x86


    Headers

    Sections

  • tools//fpu10.exe
    .exe windows x86


    Headers

    Sections

  • tools/㹤/calcfac.exe
    .exe windows x86

    fac2931069331aaf9f914f9bbdde8ab7


    Headers

    Imports

    Sections

  • tools/ѧ/cryptocal.exe
    .exe windows x86


    Headers

    Sections

  • tools/ѧ/ghirirsa.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • tools/ѧ/md.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • tools/ѧ/ripemd.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • tools//CalcVoice.exe
    .exe windows x86


    Headers

    Sections

  • 下载说明.url.url
    .url