7b1c2fc7d653786e43103fb58e0c5205

Sharing

Copy URL Twitter E-mail

General

Target

7b1c2fc7d653786e43103fb58e0c5205
Size

862KB
MD5

7b1c2fc7d653786e43103fb58e0c5205
SHA1

47381353114ca2c07371faee2cfba97ed0e9d78f
SHA256

e017f3554a95f59ba3fe0ed8f4406fcc4a0d658a4b0b501aecdaf9dbb2826815
SHA512

596342614902d4530c9205cd16754762a1cf2d45d1bea9c9379ae00ee93ddb81d393d06353119dfaeae9c7bf36bec57f240398308d969d41f47b4969eceef740
SSDEEP

12288:InUjhihQguU/em2pkzzbihlEz/b98uoHXtoKuazbVCWgeYFlJmaVMjHaNLhB1Ijh:INihlk/bboH9ocjCVMzaCV019W3aa

Score

7^/10

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 5 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/RAR Password Recovery v1.1 RC17/rsproc.dll	acprotect
static1/unpack001/RAR Password Recovery v1.1 RC17/unrpros.dll	acprotect
static1/unpack001/RAR Password Recovery v1.1 RC17/uraext2x.dll	acprotect
static1/unpack001/RAR Password Recovery v1.1 RC17/uraext3x.dll	acprotect
static1/unpack001/RAR Password Recovery v1.1 RC17/urapwd2x.dll	acprotect

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RAR Password Recovery v1.1 RC17/rsproc.dll
unpack001/RAR Password Recovery v1.1 RC17/unrpros.dll
unpack001/RAR Password Recovery v1.1 RC17/uraext2x.dll
unpack001/RAR Password Recovery v1.1 RC17/uraext3x.dll
unpack001/RAR Password Recovery v1.1 RC17/urapwd2x.dll
unpack001/RAR Password Recovery v1.1 RC17/urpwdr11rc17.exe

Files

7b1c2fc7d653786e43103fb58e0c5205
.rar
RAR Password Recovery v1.1 RC17/RAR-Password-Recovery.bmp
RAR Password Recovery v1.1 RC17/english.dic
RAR Password Recovery v1.1 RC17/example.rar
.rar
RAR Password Recovery v1.1 RC17/rprfavicon.ico
RAR Password Recovery v1.1 RC17/rsproc.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

RSPX
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSPY
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSPR
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RAR Password Recovery v1.1 RC17/unrpros.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

RPSX
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RPSY
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RPSC
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RAR Password Recovery v1.1 RC17/uraext2x.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

R2RC
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R2UX
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R2UY
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RAR Password Recovery v1.1 RC17/uraext3x.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

R3RC
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R3UX
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R3UY
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RAR Password Recovery v1.1 RC17/urapwd2x.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

R2PR
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R2SX
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R2SY
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RAR Password Recovery v1.1 RC17/urpwdr.chm
.chm
RAR Password Recovery v1.1 RC17/urpwdr11rc17.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

RSPX Size: - Virtual size: 40KB

RSPY Size: 6KB - Virtual size: 8KB

RSPR Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

RPSX Size: - Virtual size: 60KB

RPSY Size: 32KB - Virtual size: 36KB

RPSC Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

R2RC Size: - Virtual size: 64KB

R2UX Size: 36KB - Virtual size: 40KB

R2UY Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

R3RC Size: - Virtual size: 124KB

R3UX Size: 64KB - Virtual size: 64KB

R3UY Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

R2PR Size: - Virtual size: 24KB

R2SX Size: 4KB - Virtual size: 4KB

R2SY Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

.nsp0 Size: - Virtual size: 1.3MB

.nsp1 Size: 369KB - Virtual size: 372KB

.nsp2 Size: - Virtual size: 5KB

RSPX
Size: - Virtual size: 40KB

RSPY
Size: 6KB - Virtual size: 8KB

RSPR
Size: 512B - Virtual size: 4KB

RPSX
Size: - Virtual size: 60KB

RPSY
Size: 32KB - Virtual size: 36KB

RPSC
Size: 512B - Virtual size: 4KB

R2RC
Size: - Virtual size: 64KB

R2UX
Size: 36KB - Virtual size: 40KB

R2UY
Size: 512B - Virtual size: 4KB

R3RC
Size: - Virtual size: 124KB

R3UX
Size: 64KB - Virtual size: 64KB

R3UY
Size: 512B - Virtual size: 4KB

R2PR
Size: - Virtual size: 24KB

R2SX
Size: 4KB - Virtual size: 4KB

R2SY
Size: 512B - Virtual size: 4KB

.nsp0
Size: - Virtual size: 1.3MB

.nsp1
Size: 369KB - Virtual size: 372KB

.nsp2
Size: - Virtual size: 5KB