General

  • Target

    AliProtect.rar

  • Size

    1.2MB

  • MD5

    6c2fc4f7c78c759e47ccde3d66e6a35b

  • SHA1

    4e6c3addbd0d1097f3f0f9ebbf240ff755a5217a

  • SHA256

    2c4e308c5aac3db31f704c3e5a887da9223999080d900ad14ed0dd08b66f6fde

  • SHA512

    3cc63718e25fe975ac1cf5debd835e909ca36504ffd6a067979df9a2453c8132753cccd8e3e8d362e089ed6ef6d88b9b1cc93f2a020c5f25f2fb9d0ce43408f3

  • SSDEEP

    24576:zUYlvG9cU62QcLbuUHYmx0IbX8/jFax5xAbcfUGhUT5Qlz8UHn0i:YYA9cJ2NbfHYmv8bFOUbc8POIUUi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AliProtect.rar
    .rar
  • AliIMStartup.dll
    .dll windows:5 windows x86 arch:x86

    d530b4c8d23a73207a648244fa63cec8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AliProtect.dll
    .dll windows:5 windows x86 arch:x86

    cf0597cb08b33a296b9704ca9785337d


    Headers

    Imports

    Exports

    Sections

  • AliWorkbench.exe
    .exe windows:5 windows x86 arch:x86

    3fc6dcbe19f618d716856c0cba59ca9d


    Code Sign

    Headers

    Imports

    Sections

  • PX.txt