General

  • Target

    7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3

  • Size

    14.4MB

  • MD5

    039b7dc191dbed1a217de7bc7317d106

  • SHA1

    fff4ffeff8f72047a446aa567959358000863ec8

  • SHA256

    7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3

  • SHA512

    4c02a0a5d54b4132c347f836565722b373ae0210c423d7a967bc7a836f115b4a57ef6f62198dd875ffd5748cf80a35921178608bf8c651e9b7f313246503b2ad

  • SSDEEP

    393216:EaMrxThtb14qk72jhp2ZCxHZUlDpAWNXTlB/kzcpnV:EhFbNk7A8+H0VZTlB/npV

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 5 IoCs

    Detects file using ACProtect software.

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 7cd4618ad829487c038ccd9aaf63951494147f796c00e280fcf9499c32b992f3
    .zip .exe windows x86
  • PanData/aria2c.exe
    .exe windows x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections

  • PanData/directui license.txt
  • PanData/duilib license.txt
  • PanData/script/default/raname_07.lua
  • PanData/script/default/raname_08.lua
  • PanData/script/default/rename_01.lua
  • PanData/script/default/rename_02.lua
  • PanData/script/default/rename_03.lua
  • PanData/script/default/rename_04.lua
  • PanData/script/default/rename_05.lua
  • PanData/script/default/rename_06.lua
  • PanData/script/default/自定义脚本请放在上层目录
  • PanData/script/lib/cjson.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • PanData/script/lib/lcurl.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • Pandownload.exe
    .exe windows x86

    49550203287cd76e23698443898b8658


    Headers

    Imports

    Sections

  • libcurl.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • lua53.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • node.dll
    .dll windows x86


    Headers

    Exports

    Sections