General

  • Target

    gens+00961.zip

  • Size

    504KB

  • MD5

    b8d322e80ea6a216b016c99fdfd32c1b

  • SHA1

    89ce1e5529fa94898fc892b4a2edb5e979520d15

  • SHA256

    3199973a023565137b01683a5c8fc2427dec997b6295e53abd47c8b34db23adc

  • SHA512

    625b1c2237284d775b27419807a96219f6e1b5965e0734fdf0594143348d320d1335c9a09510ca1a619bf52467352e807fa38f54b5ec641a4b65df2a97877c8c

  • SSDEEP

    12288:6Lw/kj+cg4HAl2TWt8C26QEbCUDrIMUkGLDz8qJe:6Lw//cZpSNlbzDrIMUXLc

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • gens+00961.zip
    .zip
  • font.bin
  • gens+.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gens.txt
  • history.txt
  • kailleraclient.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • language.dat
  • plus!.txt