General

  • Target

    extractor.zip

  • Size

    1.1MB

  • MD5

    b5a839e716a4f5d92261cdbacf4cfa4f

  • SHA1

    eac6d34a87a3a6411e1dfe60dfd30555ac78718b

  • SHA256

    3c2c9e49a102d40894fc3bbf3da6b6a0eaf61f4ab092fac626cc97e6ea467155

  • SHA512

    7bb4f3ca635e8b37c95c700889621697e7be4baa0ec0682c695d7922199a12c4ff5d3f39eb2cd5c65fd4775485ba2af1b26368d49d0393ca9346fcb9ece429f2

  • SSDEEP

    24576:3GD5QH6AbA2l1HdDei4wbEU+4SIqQd87KJcknz55XTwt:3OSI2l1BVEU+4jgHOK

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • extractor.zip
    .zip
  • 22.BMS
    .vbs
  • 222.BMS
    .vbs
  • 22222.BMS
    .vbs
  • 444.BMS
    .vbs
  • 5555.BMS
  • BatchLZ77.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • CombinedStreaming_SFX_000000A4wav.ogg.tmp
  • CombinedStreaming_SFX_00000108.ogg.tmp
  • DarthNemesis.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Extractor.exe
    .exe windows x86


    Headers

    Sections

  • Extractor.ini
  • ExtractorExt.dll
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • Help/Czech.chm
    .chm
  • Help/English.chm
    .chm
  • Help/English.chw
  • Help/French.chm
    .chm
  • Help/Slovak.chm
    .chm
  • Languages/Czech.lng
  • Languages/English.lng
  • Languages/French.lng
  • Languages/German.lng
  • Languages/Polish.lng
  • Languages/Russian.lng
  • Languages/Slovak.lng
  • Languages/Spanish.lng
  • Selections/3DFiles.fmt
  • Selections/Audio.fmt
  • Selections/Generic.fmt
  • Selections/Graphics.fmt
  • Selections/Groupfiles.gfl
  • Selections/Midi.fmt
  • Selections/Modules.fmt
  • Selections/Sounds.fmt
  • Selections/Text.fmt
  • Selections/Video.fmt
  • eee.BMS
    .vbs
  • error.log
  • errors.txt
  • for winamp.txt
  • gg.BMS
    .vbs
  • readme.txt
  • revorb.exe
    .exe windows x86


    Headers

    Sections

  • rrr.BMS
    .vbs
  • xbcompress.exe
    .exe windows x86

    4f227c85952a7e0f033724b97272a0ec


    Headers

    Imports

    Sections

  • xbdecompress.exe
    .exe windows x86

    f43206ca545eea2a851015e8d17aac3c


    Headers

    Imports

    Sections

  • xbdm.dll
    .dll regsvr32 windows x86

    3a22051121bcdf780f4a81cb9bde26f6


    Headers

    Imports

    Exports

    Sections