General

  • Target

    2b9fe3cc07b8ffa2df02543c1c924ec0

  • Size

    3.7MB

  • MD5

    2b9fe3cc07b8ffa2df02543c1c924ec0

  • SHA1

    635e0055929810af1fe055d0a4fd63675815137a

  • SHA256

    523d7ee981bf8898a454f9739a816da879fb7548eee91f59c021513988e6b8b7

  • SHA512

    9e2b02cf8ee32787d0985f2016b0ac6f21a97436beac8d5bf4a6f93b18be87d4c6faf60e947d93e0b5930ed923fe2f95e377e4bdfbf1787de04b2ab701a27f4b

  • SSDEEP

    98304:dd8DyCaPvpsZQWzQ1Gso4AZk5+KQMiDvb:sXaMQW0UVtkwlMiH

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b9fe3cc07b8ffa2df02543c1c924ec0
    .zip
  • AgentModule.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CommonModule.dll
    .dll windows:5 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GlobalUtil.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.WindowsAPICodePack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SamFirm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections