General

  • Target

    3d80c01dfba8f036832ec9d9c63fe800be964afb61604d7774db08763625e226.zip.zip

  • Size

    1.7MB

  • MD5

    4713b1d9f1c8a6ddf185abdb5b9d9969

  • SHA1

    765f14038811203032318fcac628ee8c1eaaf7bb

  • SHA256

    0ac40cc7cac531c7f56e41dc8870fef1156cfe835ca9ad95f6ec98cd37f9c344

  • SHA512

    8da204a0c2811d4330c6a7d87267976bd3f986a33004ea07cbf3f13d479ed4e65c6be13906ffb9050f36341d5f691bfcbbfc60b897c30d14dc1c25e8ed285fe8

  • SSDEEP

    49152:+O3naEIvUkHSiVc/595vp45KaO35ZViSlrdUknOxyM:J3naLNR2p6KaO3577l9Oxx

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d80c01dfba8f036832ec9d9c63fe800be964afb61604d7774db08763625e226.zip.zip
    .zip

    Password: infected

  • 3d80c01dfba8f036832ec9d9c63fe800be964afb61604d7774db08763625e226.zip
    .zip
  • 3cie_uderzenie.nfo
  • data.pak
  • file_id.diz
  • fmod.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections

  • tu.exe
    .exe windows:4 windows x86


    Headers

    Sections