8f19bfda9badfdc2c381ba2d1d5d481c91eaf16292695aac078dcc1b36bb9090 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f19bfda9badfdc2c381ba2d1d5d481c91eaf16292695aac078dcc1b36bb9090
Size

42KB
MD5

91e3f3c5f2d1ca65d3a8cce47fb33d4f
SHA1

6a150ebab17dbd5dd8c96e5e7ff9b92a70973b87
SHA256

8f19bfda9badfdc2c381ba2d1d5d481c91eaf16292695aac078dcc1b36bb9090
SHA512

6f9507c7ed1b411960731c6fc0e5eed92639dade9c3e7968635c96184c034df557a2e636475c657f4198206dfec1cd09490ccb665904161f2bdee8d7ac049961
SSDEEP

768:TMHPBfyGZezYW6cCSqYZ7nh94lLA6mQrD/0j8DBjLjeGDN28V5qX08C+qXXs33n2:TOBfhlpcDNnh9ELLmeMANTxN7LD+icH2

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/BINARY/MYDOOM.EXE	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/BINARY/MYDOOM.EXE	upx

Files

8f19bfda9badfdc2c381ba2d1d5d481c91eaf16292695aac078dcc1b36bb9090
.zip
BINARY/MYDOOM.EXE
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_readme.txt
lib.c
lib.h
main.c
makefile
massmail.c
massmail.h
msg.c
msg.h
p2p.c
resource.ico
resource.rc
scan.c
scan.h
sco.c
sco.h
work/bin2c.c
work/cleanpe.cpp
work/crypt1.c
work/rot13.c
work/stub.exe
xdns.c
xdns.h
xproxy/client.c
xproxy/makefile
xproxy/xproxy.c
xsmtp.c
xsmtp.h
zipstore.c
zipstore.h