General

  • Target

    f2dda6d8d8d5974d64fd8c9d473c8f9f2d494c71d48782a523918973898b87fc.zip.zip

  • Size

    495KB

  • MD5

    e78ffd253d1f97401b9b98b26360dfea

  • SHA1

    3756299d423a0d81c95e03d546b6e28b75fde2de

  • SHA256

    ae52df0ea3c7fff7998a04eae80f6d56d30bb8c0b9201aa57f852adfafcec325

  • SHA512

    3f1c65ab710ed4a578777df345395a61b965abcd1de69b6c9228b619a11e6a7388d55b7ab928ec29049c25b22908fd0bd69b41614f8911a5ff07659d5b2553c6

  • SSDEEP

    12288:QJLbjb6FpYQSuglH92Y6nEBfuWcrPAcrgfOQ5WsCsf/y:aSFc72Y6n05lfJWb

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • f2dda6d8d8d5974d64fd8c9d473c8f9f2d494c71d48782a523918973898b87fc.zip.zip
    .zip

    Password: infected

  • f2dda6d8d8d5974d64fd8c9d473c8f9f2d494c71d48782a523918973898b87fc.zip
    .zip
  • CRCGen.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • CRCGen.txt
  • FrotzImport.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • msvcp80.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • msvcr80.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections