General

  • Target

    2ce106df99115de65fbeb39c6a8e009c00c7f05884cb96838d927d3ca3758607

  • Size

    3.8MB

  • MD5

    b89161cbcc294e23197c251bdc8d5d11

  • SHA1

    0fae05d559acbd183c7717ee295c3628312badbb

  • SHA256

    2ce106df99115de65fbeb39c6a8e009c00c7f05884cb96838d927d3ca3758607

  • SHA512

    351c72a6891de5429ecb393e65ef169eff252838e18c81e877cd9e8aee47b1b6709ff3253c9cde142090110e4a48514f20613170aa04e2dfbd9d5f9b9319400a

  • SSDEEP

    98304:gUf8e/NouySfdLOd5YZQjCgABXXw5NhOaJSW:bf/NogLYCKjCINhJ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ce106df99115de65fbeb39c6a8e009c00c7f05884cb96838d927d3ca3758607
    .zip
  • 三星手机固件下载工具/AgentModule.dll
    .dll windows:5 windows x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 三星手机固件下载工具/CommonModule.dll
    .dll windows:5 windows x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 三星手机固件下载工具/GlobalUtil.dll
    .dll windows:5 windows x86


    Code Sign

    Headers

    Exports

    Sections

  • 三星手机固件下载工具/Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 三星手机固件下载工具/Microsoft.WindowsAPICodePack.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 三星手机固件下载工具/hadesFirm.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 三星手机固件下载工具/hadesFirm.log
  • 三星手机固件下载工具/hadesFirm.pdb
  • 三星手机固件下载工具/hadesFirm.xml
  • 三星手机固件下载工具/手动搜索固件参数/手动下载参数.txt