Overview

overview

7

Static

static

7

PEiD.exe

windows7-x64

7

PEiD.exe

windows10-2004-x64

7

PEiD_ch.exe

windows7-x64

7

PEiD_ch.exe

windows10-2004-x64

1

plugins/AddSig.dll

windows7-x64

1

plugins/AddSig.dll

windows10-2004-x64

1

plugins/AddSig.html

windows7-x64

1

plugins/AddSig.html

windows10-2004-x64

1

plugins/CRC32.dll

windows7-x64

7

plugins/CRC32.dll

windows10-2004-x64

7

plugins/EPScan.dll

windows7-x64

1

plugins/EPScan.dll

windows10-2004-x64

1

plugins/Ex...ay.dll

windows7-x64

1

plugins/Ex...ay.dll

windows10-2004-x64

7

plugins/FileInfo.dll

windows7-x64

1

plugins/FileInfo.dll

windows10-2004-x64

1

plugins/FixCRC.dll

windows7-x64

1

plugins/FixCRC.dll

windows10-2004-x64

1

plugins/GenOEP.dll

windows7-x64

1

plugins/GenOEP.dll

windows10-2004-x64

7

plugins/ImpREC.dll

windows7-x64

3

plugins/ImpREC.dll

windows10-2004-x64

1

plugins/RebuildPE.dll

windows7-x64

7

plugins/RebuildPE.dll

windows10-2004-x64

7

plugins/SmartOVR.dll

windows7-x64

1

plugins/SmartOVR.dll

windows10-2004-x64

1

plugins/St...er.dll

windows7-x64

7

plugins/St...er.dll

windows10-2004-x64

7

plugins/UNUPX.dll

windows7-x64

1

plugins/UNUPX.dll

windows10-2004-x64

1

plugins/UnUPXShit.dll

windows7-x64

1

plugins/UnUPXShit.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa070f00e3cfbdd6d36a17d8e4836f26

  • Size

    1.2MB

  • MD5

    fa070f00e3cfbdd6d36a17d8e4836f26

  • SHA1

    a16fb605df42d438c839df48de2650e65ee897e6

  • SHA256

    e3b27197107f96e378e6a4c8f33a1f13f4dd08ee2da60e8b5c423a2712762209

  • SHA512

    8ebb62fa840540b5a1d0bebd05b74c1d420f8fe4d863bfe30050e922c5549650fc3da9285f7201015465f00ca51c8092f57d2903110fe107377e2ce72907f288

  • SSDEEP

    24576:PsxUC+pbNngAXzptp+OK6RSwjwg6lP2K4ua1/m4APPPjbpt:0lKbLfpFR7wg6lPl4uakHPPP3pt

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 18 IoCs

    Detects file using ACProtect software.

  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 36 IoCs

    Checks for missing Authenticode signature.

Files

  • fa070f00e3cfbdd6d36a17d8e4836f26
    .rar
  • PEiD.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • PEiD_ch.exe
    .exe windows:4 windows x86 arch:x86

    8a2595364a5dfe61a7fd611ddc14cd57


    Headers

    Imports

    Sections

  • external.txt
  • plugins/AddSig.DLL
    .dll windows:4 windows x86 arch:x86

    02328e7ddc28f9f122f3c1001b2a5e47


    Headers

    Imports

    Exports

    Sections

  • plugins/AddSig.HTML
    .html
  • plugins/CRC32.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins/EPScan.dll
    .dll windows:4 windows x86 arch:x86

    c666e5e72f0ab836193a6ecc9d4651fa


    Headers

    Imports

    Exports

    Sections

  • plugins/ExtOverlay.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins/FileInfo.dll
    .dll windows:4 windows x86 arch:x86

    d6a022763f44013440a820232d928b0b


    Headers

    Imports

    Exports

    Sections

  • plugins/FixCRC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/GenOEP.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins/ImpREC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/RebuildPE.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/SmartOVR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/StringViewer.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins/UNUPX.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/UnUPXShit.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/UnUPolyX.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/VerA.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins/ZDRx.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/advanced_scan.dll
    .dll windows:4 windows x86 arch:x86

    669ae3ec963ee17510408453b86e34a9


    Headers

    Imports

    Exports

    Sections

  • plugins/kanal.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/kanal.htm
    .html
  • plugins/pluzina1.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/pluzina2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/pluzina3.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/pluzina4.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/undef.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • plugins/unfsg_v133.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plugins/xInfo.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pluginsdk/NULL.dll
    .dll windows:4 windows x86 arch:x86

    e07e00e45407ff0dd6abc9eaa981fa7b


    Headers

    Imports

    Exports

    Sections

  • pluginsdk/defs.h
  • pluginsdk/null.c
  • readme.txt
  • tools/PEiD Signature Organizer/PEIDSO.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • tools/PEiD Signature Organizer/userdb.txt
  • tools/PEid_db_Manager_1.01/PEid db Manager.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • tools/PEid_db_Manager_1.01/userdb.txt
  • tools/PEid_db_Manager_1.01/userdb2.txt
  • tools/PEid_db_Manager_1.01/userdbopt.txt
  • userdb.txt