Overview

overview

7

Static

static

7

Help/Help_...ss.htm

windows7-x64

1

Help/Help_...ss.htm

windows10-2004-x64

1

Help/Help_Convert.htm

windows7-x64

1

Help/Help_Convert.htm

windows10-2004-x64

1

Help/Help_Create.htm

windows7-x64

1

Help/Help_Create.htm

windows10-2004-x64

1

Help/Help_Extract.htm

windows7-x64

1

Help/Help_Extract.htm

windows10-2004-x64

1

Help/Help_Install.htm

windows7-x64

1

Help/Help_Install.htm

windows10-2004-x64

1

Help/Help_License.htm

windows7-x64

1

Help/Help_License.htm

windows10-2004-x64

1

Help/Help_Log.htm

windows7-x64

1

Help/Help_Log.htm

windows10-2004-x64

1

Help/Help_...ty.htm

windows7-x64

1

Help/Help_...ty.htm

windows10-2004-x64

1

Help/Help_...ts.htm

windows7-x64

1

Help/Help_...ts.htm

windows10-2004-x64

1

Help/Misc_NSIS.htm

windows7-x64

1

Help/Misc_NSIS.htm

windows10-2004-x64

1

Help/Misc_UHARC.htm

windows7-x64

1

Help/Misc_UHARC.htm

windows10-2004-x64

1

Readme.htm

windows7-x64

1

Readme.htm

windows10-2004-x64

1

Resources/SFX.exe

windows7-x64

7

Resources/SFX.exe

windows10-2004-x64

7

Resources/TinyUI.exe

windows7-x64

1

Resources/TinyUI.exe

windows10-2004-x64

1

System/NSIS.exe

windows7-x64

7

System/NSIS.exe

windows10-2004-x64

7

System/UHARC_04.exe

windows7-x64

7

System/UHARC_04.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    05bf9869fb0eaa084ec65b95bff56eb7

  • Size

    1.3MB

  • MD5

    05bf9869fb0eaa084ec65b95bff56eb7

  • SHA1

    5911cf9f032d57d92b9d5e42a0b5f57873a1e0cf

  • SHA256

    5f9e27e4e6e64895a3e10d83334962f144b8e4b00d510f6f0e00dee190d5f1b3

  • SHA512

    c222018309164c807c477dd1ae102830c7c3b23f2c319d55d465581df7ea774da9a7d7fb20d3c97162ef9902a7c72bfac97ae3887d185439f7925e974f6ad1a4

  • SSDEEP

    24576:AczWQLnxBb+SRMnTtAV3pwT4pgSOBD6r+To6gOtfQQN4QXFeK8T/cVcJhNBoi:PzWExMnxq3eCBOB+r+TVgM718TcOJz

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 05bf9869fb0eaa084ec65b95bff56eb7
    .rar
  • Help/Help_Compress.htm
  • Help/Help_Convert.htm
  • Help/Help_Create.htm
  • Help/Help_Extract.htm
  • Help/Help_Install.htm
  • Help/Help_License.htm
  • Help/Help_Log.htm
  • Help/Help_Security.htm
  • Help/Help_Shortcuts.htm
  • Help/Images/Screenshot.png
    .png
  • Help/Misc_NSIS.htm
    .html
  • Help/Misc_UHARC.htm
    .html
  • Help/Style.css
  • Help/下载说明.htm
    .html .js polyglot
  • Readme.htm
    .html
  • Resources/Check.bmp
  • Resources/SFX.bin
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Resources/Setup.ico
  • Resources/TinyUI.dlg
    .exe windows:4 windows x86 arch:x86

    75fffa1baff79466e7ca3368ac0d7c9b


    Headers

    Imports

    Sections

  • Resources/Uninstall.ico
  • Resources/下载说明.htm
    .html .js polyglot
  • System/NSIS.x86
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • System/UHARC_04.x86
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • System/UHARC_06.x86
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • System/下载说明.htm
    .html .js polyglot
  • Toolz.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • UHARC_GUI.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.txt