General

  • Target

    9292c31dac1e8e8ad4390aa56b31b3363e555e04f853a8dad0044d984b27a915

  • Size

    4.5MB

  • MD5

    4cb006657925358bb98164aae698a1b6

  • SHA1

    57030edbe08b4fc93c2dd04602b07187624c99f9

  • SHA256

    9292c31dac1e8e8ad4390aa56b31b3363e555e04f853a8dad0044d984b27a915

  • SHA512

    daaca707c69e2d2ae51cccf5cacfe33991f8c04b221d32d7b715e4b607d34d0252217024197880b1499a5b2b539528beec49d081e04a36389c09c608f65ebd93

  • SSDEEP

    98304:fd09Pebkxvwj+qHsPXxyeukdHT/kZA8gsDdOKjJZ86jGj:lGPebk2jpeYezcJgw9Z86jGj

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 9292c31dac1e8e8ad4390aa56b31b3363e555e04f853a8dad0044d984b27a915
    .cab
  • Data/ASYCFILT.DLL
    .dll windows x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • Data/CMCT2IT.DLL
    .dll windows x86


    Headers

    Sections

  • Data/CMDLGIT.DLL
    .dll windows x86


    Headers

    Sections

  • Data/COMCAT.DLL
    .dll regsvr32 windows x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • Data/COMCT232.OCX
    .dll regsvr32 windows x86

    de62eb0090e2f591c9cb423686b9da71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/COMDLG32.OCX
    .dll regsvr32 windows x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/FldrView.ocx
    .dll regsvr32 windows x86

    121a7d3eb195b8290080507e113c858d


    Headers

    Imports

    Exports

    Sections

  • Data/Library.dll
    .exe windows x86


    Headers

    Sections

  • Data/MSCMCIT.DLL
    .dll windows x86


    Headers

    Sections

  • Data/MSVBVM60.DLL
    .dll regsvr32 windows x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • Data/MSVCRT.DLL
    .dll windows x86

    f583a53985668060aed820e29de94793


    Headers

    Imports

    Exports

    Sections

  • Data/Main.avi
  • Data/Mscomct2.ocx
    .dll regsvr32 windows x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/Mscomctl.ocx
    .dll regsvr32 windows x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Data/OLEAUT32.DLL
    .dll regsvr32 windows x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • Data/OLEPRO32.DLL
    .dll regsvr32 windows x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • Data/PXHLP.HLP
  • Data/PXHlp.GID
  • Data/PXHlp.cnt
  • Data/Prot.avi
  • Data/STDOLE2.TLB
    .dll windows x86


    Headers

    Sections

  • Data/Scan.exe
    .exe windows x86

    fca1c3bcd0ec944d6854c9ffdf877cd9


    Headers

    Imports

    Sections

  • Data/Smith.exe
    .exe windows x86

    7e5fd6e78f19e15dd9a0b9dea67a53a8


    Headers

    Imports

    Sections

  • Data/VB6IT.DLL
    .dll windows x86


    Headers

    Sections

  • Data/VB6STKIT.DLL
    .dll windows x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • Data/Vb5db.dll
    .dll windows x86

    2824fcddda9a05ec563c0e7037537798


    Headers

    Imports

    Exports

    Sections

  • Data/dao360.dll
    .dll regsvr32 windows x86

    740d7cb11304862970f49454448a6e33


    Headers

    Imports

    Exports

    Sections

  • Data/expsrv.dll
    .dll windows x86

    548d9bb3cc3953486c58d739eb336b48


    Headers

    Imports

    Exports

    Sections

  • Data/mail.url
    .url
  • Data/msjet40.dll
    .dll regsvr32 windows x86

    5e3d5cfa00a13e6293285e4d8d043191


    Headers

    Imports

    Exports

    Sections

  • Data/msjint40.dll
    .dll windows x86

    1806b74271ce3922c63ebda12c052a1b


    Headers

    Imports

    Exports

    Sections

  • Data/msjter40.dll
    .dll windows x86

    14d83ff58b19f0b5c2f5897d101b10a1


    Headers

    Imports

    Exports

    Sections

  • Data/msjtes40.dll
    .dll regsvr32 windows x86

    af57a2f1fef6870aad73c3cbc84fb4f7


    Headers

    Imports

    Exports

    Sections

  • Data/msoft.url
    .url
  • Data/msrd2x40.dll
    .dll regsvr32 windows x86

    0b1eff9739529836ab502d9228e6ef11


    Headers

    Imports

    Exports

    Sections

  • Data/msrd3x40.dll
    .dll regsvr32 windows x86

    56fe588063a3c8942f7894674291e383


    Headers

    Imports

    Exports

    Sections

  • Data/msrepl40.dll
    .dll windows x86

    85425320b71738dae8ff3e3cec60c891


    Headers

    Imports

    Sections

  • Data/mswdat10.dll
    .dll windows x86

    e5bac0dbe42889aac3f246beb566594a


    Headers

    Imports

    Sections

  • Data/mswstr10.dll
    .dll windows x86

    bd38482529393441dd232201308aebfc


    Headers

    Imports

    Sections

  • Data/scrrnit.dll
    .dll windows x86


    Headers

    Sections

  • Data/scrrun.dll
    .dll regsvr32 windows x86

    bca884b4afc80c860d8f651c1327bfa9


    Headers

    Imports

    Exports

    Sections

  • Data/tc/Language.it.xml
  • Data/tc/SmithFormat.exe
    .exe windows x86


    Headers

    Sections

  • Data/tc/TrueCrypt Format.exe
    .exe windows x86

    f47ec87ddfdb162e7d6711cf3b16094c


    Headers

    Imports

    Sections

  • Data/tc/TrueCrypt.exe
    .exe windows x86

    14dc34463074e45ac5b3513489ae6051


    Headers

    Imports

    Sections

  • Data/tc/disk.ico
  • Data/tc/truecrypt-x64.sys
    .exe windows x64

    f9301e2efa6fd14628e56db344340066


    Headers

    Imports

    Sections

  • Data/tc/truecrypt.sys
    .exe windows x86

    4396fbf3a8adae4a288cbe8c633f5c24


    Headers

    Imports

    Sections

  • Data/termsign.exe
    .exe windows x86


    Headers

    Sections

  • Data/vbajet32.dll
    .dll windows x86

    8e4cca56f88f6d206aa5a20cdaf1a0c8


    Headers

    Imports

    Exports

    Sections

  • Presetup/App.ins
  • Presetup/Enu.lng
  • Presetup/Gins.bmp
  • Presetup/Gins.ini
  • Presetup/Ita.lng
  • Presetup/License.ita
  • Presetup/Ungins.exe
    .exe windows x86


    Headers

    Sections