General

  • Target

    5fd2706211d1197845f707c20ccf2480a54bf0c03fa87f7819d7541ae4b591bd.zip.zip

  • Size

    9.5MB

  • MD5

    15c645a1ba0d0531db7f3197479fde85

  • SHA1

    701de0852532cbcf0ea690750efdb21c894c353d

  • SHA256

    0f83808f4d6ce4bbf8c19b06edc5427bf6b525c2f5e56540d7f17053ee6bf3f8

  • SHA512

    7fa383ce3c26e8c5ec102d6721d9146fc491d0abea5e3a5c866a7a2a204e8b7f51a36d8f232e0f51642f3874f4d7512bb9936e2196f54b48e0bc9951a728a130

  • SSDEEP

    196608:U6ong7GV17+SbzK+t3fJt0O67oJ7zfnawc6OYhKkiJpz13gS+:7onwqjzK+tBEevtc6CkiH5gS+

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fd2706211d1197845f707c20ccf2480a54bf0c03fa87f7819d7541ae4b591bd.zip.zip
    .zip

    Password: infected

  • 5fd2706211d1197845f707c20ccf2480a54bf0c03fa87f7819d7541ae4b591bd.zip
    .zip
  • ploop/data
    .rar
  • ploop/fmod.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections

  • ploop/madwizards.png
    .png
  • ploop/mwi.gif
    .gif
  • ploop/ploop.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • ploop/ploop.ogg
  • ploop/readme.txt