General

  • Target

    083cb32cf2f3f449f26ca4bbfaed063162506bae2c9d76043d18e81b5fac78fa.zip.zip

  • Size

    10.8MB

  • MD5

    6555d7c658165622009bdda5c3dd086a

  • SHA1

    d02e51f0bb86fc68fd179bec72c2c58d27be6775

  • SHA256

    df9c227f81587530d48179bfd9750fb3e7489bf9f0949b8bb3e199d3bbfdeb5b

  • SHA512

    5daa35c8e613ff0557bbd2592946f6f930363769ac1dbbc49a212f8863159afe2586d70c513d1a52f4a9b41eff1d49db488f8616e5295a6026507d0519b6f8b8

  • SSDEEP

    196608:S0/Ev4o7U4u22tIlnLKU5knlx36uxgXV5hHZx4XOeje7AQZIJcdjsTp2Mtt4+7JF:S0i4ptDnfKug514Xs7AQc0sl2d+7J31

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 083cb32cf2f3f449f26ca4bbfaed063162506bae2c9d76043d18e81b5fac78fa.zip.zip
    .zip

    Password: infected

  • 083cb32cf2f3f449f26ca4bbfaed063162506bae2c9d76043d18e81b5fac78fa.zip
    .zip
  • DDE2EXCEL_PR.dll
    .dll windows:4 windows x86

    909d5a6159b8df4a5ca1eea3184f4cb3


    Headers

    Imports

    Exports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86

    f325e1ae915b98bc4702bb3efa8aea4a


    Headers

    Imports

    Exports

    Sections

  • QCtrls.dll
    .dll windows:4 windows x86

    2286a512487b282a7d70fbb822c6012f


    Headers

    Imports

    Exports

    Sections

  • QHtmlRep.dll
    .dll windows:4 windows x86

    143ad2af2758196399564662a3134848


    Headers

    Imports

    Exports

    Sections

  • QLUA.chm
    .chm
  • QMargin.dll
    .dll windows:4 windows x86

    173a7670b1da60959ddb175236afea1f


    Headers

    Imports

    Exports

    Sections

  • Qrypto32_Pr.dll
    .dll windows:4 windows x86

    ea24295d1399af001024a5bf640e73a0


    Headers

    Imports

    Exports

    Sections

  • SecProv.dll
    .dll windows:4 windows x86

    0a6d224bd0495782c60fa723b20e8716


    Headers

    Imports

    Exports

    Sections

  • WinRos.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • default.wnd
  • info.chm
    .chm
  • info.exe
    .exe windows:4 windows x86

    99da9646af03892c3946bd7ebb47b619


    Headers

    Imports

    Exports

    Sections

  • info.ini
  • info.wnd
  • ip.cfg
  • iwr.dll
    .dll windows:4 windows x86

    62f34a906a9a993a97456b99ad9ca521


    Headers

    Imports

    Exports

    Sections

  • lang_res.dll
    .dll windows:4 windows x86

    229bb8e1f0029f72f2c030065ea2278c


    Headers

    Imports

    Exports

    Sections

  • ll09_01.dll
    .dll windows:4 windows x86

    229bb8e1f0029f72f2c030065ea2278c


    Headers

    Imports

    Exports

    Sections

  • qchart.dll
    .dll windows:4 windows x86

    7ba25a5b583f30269addada349846abf


    Headers

    Imports

    Exports

    Sections

  • qcrypto.ini
  • qhotkey.dll
    .dll windows:4 windows x86

    cf2db35cbb4101552942a8aa6673eb0c


    Headers

    Imports

    Exports

    Sections

  • qlist.dll
    .dll windows:4 windows x86

    4682c49467988303cf55351cbe0e4989


    Headers

    Imports

    Exports

    Sections

  • qlua.dll
    .dll windows:5 windows x86

    dcb18712981222a86e064874efca155e


    Headers

    Imports

    Exports

    Sections

  • qpile.dll
    .dll windows:4 windows x86

    f3f5b135e79d4d541b53faa77c22d2a8


    Headers

    Imports

    Exports

    Sections

  • qrypto.cfg
  • qrypto32.dll
    .dll windows:4 windows x86

    584dacf8c5a574b1b1e5a73284665822


    Headers

    Imports

    Exports

    Sections

  • randseed.bin
  • smask.bin
  • sokrattest.txk
  • update.exe
    .exe windows:5 windows x86

    644608a92d9553bdccf7b44fa6a27daf


    Headers

    Imports

    Sections

  • update_a.exe
    .exe windows:4 windows x86

    e4a68faa02925845d3d4fa9005611bee


    Headers

    Imports

    Sections

  • wt_de.dll
    .dll windows:4 windows x86

    99fee393db49d6eb43c62d580ec8fe74


    Headers

    Imports

    Exports

    Sections

  • wt_dtcp.dll
    .dll windows:4 windows x86

    768c42540ae67ab04084e417058ace22


    Headers

    Imports

    Exports

    Sections