Overview

overview

7

Static

static

7

Skin.dll

windows7-x64

7

Skin.dll

windows10-2004-x64

7

VKPlu/GDRoom.exe

windows7-x64

1

VKPlu/GDRoom.exe

windows10-2004-x64

1

VKPlu/War3Shout.exe

windows7-x64

7

VKPlu/War3Shout.exe

windows10-2004-x64

7

VKPlu/autodota.dll

windows7-x64

7

VKPlu/autodota.dll

windows10-2004-x64

7

VKPlu/h.dll

windows7-x64

1

VKPlu/h.dll

windows10-2004-x64

1

VKPlu/lagtr.dll

windows7-x64

7

VKPlu/lagtr.dll

windows10-2004-x64

7

VKPlu/ncd.dll

windows7-x64

7

VKPlu/ncd.dll

windows10-2004-x64

7

VKPlu/pe.dll

windows7-x64

1

VKPlu/pe.dll

windows10-2004-x64

7

VKPlu/spa.dll

windows7-x64

1

VKPlu/spa.dll

windows10-2004-x64

1

VKPlu/spb.dll

windows7-x64

7

VKPlu/spb.dll

windows10-2004-x64

7

vksp.dll

windows7-x64

7

vksp.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1da1139020ece1d8788984391bb28370

  • Size

    3.0MB

  • MD5

    1da1139020ece1d8788984391bb28370

  • SHA1

    192522ebba0c69d7adb2e1462c14d3f41fb9fc7f

  • SHA256

    7d28e42cdd2c6c67c782d7c09a28e60e63b094fe1f4bab23a3e95c8153e750c2

  • SHA512

    f96036dfddaafff4a4237016e42fb07f5a3fbae6d8c43b42864beb47d94a5916212b79b1dd6ef8fde707a64e504e315090bb0c3ee472ebd4f2fe945690044e76

  • SSDEEP

    49152:Eh16ObDjLEmPRKZSadBzuEdIEIOGOtTGVGAtv2iuRqHIXbEZCNDTbYDdFs50vPXB:86AvYPrdAVs5R6028bieDTbQdFIMrMnQ

Score
7/10
upxvmprotect

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • VMProtect packed file 5 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 1da1139020ece1d8788984391bb28370
    .rar
  • Skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VKCFG.ini
  • VKPlu/GDRoom.exe
    .exe windows:5 windows x86 arch:x86

    ae2deb12fefef97e9afd6203eb438a0f


    Headers

    Imports

    Sections

  • VKPlu/GDRoom.ini
  • VKPlu/VK2011.she
  • VKPlu/War3Shout.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • VKPlu/autodota.dll
    .dll windows:4 windows x86 arch:x86

    e8e9afc630c931ea833230538f5bcd52


    Headers

    Imports

    Sections

  • VKPlu/h.exe
    .dll windows:4 windows x86 arch:x86

    3123c2cacfe301d29f771a35ef3bf517


    Headers

    Imports

    Sections

  • VKPlu/hdl.wav
  • VKPlu/lagtr.dll
    .dll windows:4 windows x86 arch:x86

    7e1bb67e31fc5d9302875fbf94414016


    Headers

    Imports

    Sections

  • VKPlu/ncd.dll
    .dll windows:4 windows x86 arch:x86

    5582b62283ba75c0108143cfd6784e64


    Headers

    Imports

    Sections

  • VKPlu/pe.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VKPlu/spa.dll
    .dll windows:4 windows x86 arch:x86

    4ad28a4f70f2d27c641beed32c96f839


    Headers

    Imports

    Sections

  • VKPlu/spb.dll
    .dll windows:4 windows x86 arch:x86

    add5d6a72b8fd3394a79ef8d90b96e9c


    Headers

    Imports

    Exports

    Sections

  • VKPlu/vkbg.jpg
    .jpg
  • VKPlu/wsset.ini
  • vksp.dll
    .dll windows:4 windows x86 arch:x86

    c14e7f82c9c7ce7978abad00fcf2d8fb


    Headers

    Imports

    Exports

    Sections