General

  • Target

    f49b7a52f8461c84df8893fdbde205a32df25355945c49e34a2dabae0ab29645.zip.zip

  • Size

    5.0MB

  • MD5

    2eee48fece28d0fdd7afae588a45d858

  • SHA1

    7e76910db5a5da2b4a620bb2be8095859137f27e

  • SHA256

    ea4d5f09e4fc91deb5b09d6773ab4e5f35d008f8cd3d9d8f9be0b5bad3e98b56

  • SHA512

    07127e3d862c9a7843e75bf7867b1ea643f4b4aec54411e4874e742824d47910e31559d4801c7c77bd5553804115561e037986f07acd733b0fb481ce0c111c21

  • SSDEEP

    98304:iRa4YgaYGD6F1J4Uudoj1bjVvjwXkLKF1Imrk4Vh0lEo/FIEm49cEgulj41/kdfW:iRaSGGFP4UJ1bJc2KYmrVhwEeM49cEgX

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • f49b7a52f8461c84df8893fdbde205a32df25355945c49e34a2dabae0ab29645.zip.zip
    .zip

    Password: infected

  • f49b7a52f8461c84df8893fdbde205a32df25355945c49e34a2dabae0ab29645.zip
    .zip
  • finaldata/FDIDE.VXD
  • finaldata/FINALDATA.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • finaldata/FdWizard.exe
    .exe windows:4 windows x86

    d60f48e1e071f518fa8de3f0850ee7ea


    Code Sign

    Headers

    Imports

    Sections

  • finaldata/FinalData.cnt
  • finaldata/HunLib.dll
    .dll windows:4 windows x86

    021b6c5590d35e5853b2b7498523adc1


    Headers

    Imports

    Exports

    Sections

  • finaldata/INFDRV.dll
    .dll windows:4 windows x86

    4d9dbab255f9bb83059660eeba980a77


    Headers

    Imports

    Exports

    Sections

  • finaldata/INFTHK.DLL
  • finaldata/fdxutil.dll
    .dll windows:4 windows x86

    9205ceb88e2719b54fab74decef5f2b6


    Headers

    Imports

    Exports

    Sections