General

  • Target

    11cfc93ce08d812c18c2af97e0b1f62ed868301920c8adcaf45b39457d501203.zip.zip

  • Size

    2.7MB

  • MD5

    1021ebde369c212bbfa143a29b5743d4

  • SHA1

    a2ce682272eba66f5f83365ccd638bd6c4e97aa8

  • SHA256

    341c5c0f40510900e139d9d4c60cec4a17be2859871702efafdf42daf5cc69b6

  • SHA512

    7427fecaf3b992a331650c4c0ed35ef7b78d0dcd7cc06f8fb8d768874e1b11c93bf3afd2153f4494c70dcab75dc7ed9fd990d825ab6cf5ceecfb4f48e8904838

  • SSDEEP

    49152:EpqiAiC8CkSxIjHY/nKiH39bUZ+gJAJeCrBjvFPhpvSCnhWYVMqwhqf5Sx8IOw:mqiBQIj4/nKq3iZ+gYrBZPhpvRnhWYVY

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 11cfc93ce08d812c18c2af97e0b1f62ed868301920c8adcaf45b39457d501203.zip.zip
    .zip

    Password: infected

  • 11cfc93ce08d812c18c2af97e0b1f62ed868301920c8adcaf45b39457d501203.zip
    .zip
  • acidkids.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • acidkids.nfo
  • disclaim.er
  • file_id.diz
  • fmod.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections

  • gfx.pak
  • ijl10.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections

  • msx/33.XM
  • msx/fantasy.xm
  • msx/flusing.xm
  • msx/orbit.xm
  • msx/out_of.xm
  • msx/roy_da.xm
  • msx/scoth.xm
  • msx/space_ho.xm
  • msx/trafka_l.xm
  • msx/yellow_f.xm