General

  • Target

    28b02a8a271c212e54fa71a0cfebaea2

  • Size

    276KB

  • MD5

    28b02a8a271c212e54fa71a0cfebaea2

  • SHA1

    400c1759ec04b32a967d30932d00f63c8af97e49

  • SHA256

    ea8eba64567973b8e242da0f86843b71c4678bab9721b7851ed00196ee5820d1

  • SHA512

    8d4d6e78349317ca26f85af08264f9755076d90c8e44e3f7dc4fc65ce0731ca4f4a52d9956bcaaa3c6f8c086c5433835d2a6d2d6d68494480f40a3d9ee1027da

  • SSDEEP

    6144:pGqO6hjbICEZoAySed7rzp5Sf/aaczwFRLqNy2Ut2IHa9cC6ny:7O2bI6Syrp5sSXwrqNyzSco

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b02a8a271c212e54fa71a0cfebaea2
    .rar
  • Darkstorm3.0/Darkstorm.ini
  • Darkstorm3.0/TF2Base.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Darkstorm3.0/TF2Base.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Darkstorm3.0/readme.txt