General

  • Target

    17038c08e8c9c91bb3b24a50800c89a9e77599de179d3837bcd9fd97c69a7afb

  • Size

    42.5MB

  • MD5

    afcd1449ab1606d353cfa6e9d6eebdfd

  • SHA1

    3b0a2baba1508287701e03d27ea629efec7346f6

  • SHA256

    17038c08e8c9c91bb3b24a50800c89a9e77599de179d3837bcd9fd97c69a7afb

  • SHA512

    e6b99dc9a68cfc5f2aef825a188d5bdcd6a852322adaa195168da6472d8ee2b43fe3c9e271470d38a10334154ac5820ce1210382c6d6c8c09cf21083596e4408

  • SSDEEP

    786432:RFRv7CYimAQlYMbJAS+fAppyKXSoHv2PKMWxwdmsMQ3tLNcMcmPctN5/dh:RFR+YimAQlYYGR8Pio+PK3IMm0tN1T

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 94 IoCs

    Checks for missing Authenticode signature.

Files

  • 17038c08e8c9c91bb3b24a50800c89a9e77599de179d3837bcd9fd97c69a7afb
    .zip
  • AnalyzeData.dll
    .dll windows:5 windows x86 arch:x86

    f3a61bef5919ecdc65912b65a2b33202


    Headers

    Imports

    Exports

    Sections

  • AudioIntercom.dll
    .dll windows:5 windows x86 arch:x86

    050dd5ff5441f4c93c27a64f3fff0628


    Headers

    Imports

    Exports

    Sections

  • AudioRender.dll
    .dll windows:5 windows x86 arch:x86

    736b9ce748dc383f3c912ccb2f0db728


    Headers

    Imports

    Exports

    Sections

  • BS_SDK.dll
    .dll windows:4 windows x86 arch:x86

    a5a2359a96cb19df9b11b4d1825784ae


    Headers

    Imports

    Exports

    Sections

  • BS_SDK_V2.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FPModule_SDK.dll
    .dll windows:5 windows x86 arch:x86

    ebd0ff33c4bd9f5ed7a96a18578ff574


    Headers

    Imports

    Exports

    Sections

  • HCAlarm.dll
    .dll windows:6 windows x86 arch:x86

    2c9876832ebf7c63527f5ff18a123e91


    Headers

    Imports

    Exports

    Sections

  • HCCore.dll
    .dll windows:6 windows x86 arch:x86

    7b3f4027b954be8a8721f5f21419e164


    Headers

    Imports

    Exports

    Sections

  • HCCoreDevCfg.dll
    .dll windows:6 windows x86 arch:x86

    7c96c689cc6e981d0e590f573c238817


    Headers

    Imports

    Exports

    Sections

  • HCDisplay.dll
    .dll windows:6 windows x86 arch:x86

    c27f934fdfa696693c3d2b4a890ec5ef


    Headers

    Imports

    Exports

    Sections

  • HCGeneralCfgMgr.dll
    .dll windows:6 windows x86 arch:x86

    f160e26eafdc209bf3650113dff1b33e


    Headers

    Imports

    Exports

    Sections

  • HCIndustry.dll
    .dll windows:6 windows x86 arch:x86

    93fcf144bea7d4274c0977e5a9eb8cb5


    Headers

    Imports

    Exports

    Sections

  • HCNetSDK.dll
    .dll windows:6 windows x86 arch:x86

    7bcc30c75a63d25ffc66a2b02b944d07


    Headers

    Imports

    Exports

    Sections

  • HCPlayBack.dll
    .dll windows:6 windows x86 arch:x86

    172231e953576da5891e1522ee5619bd


    Headers

    Imports

    Exports

    Sections

  • HCPreview.dll
    .dll windows:6 windows x86 arch:x86

    2b990fedb6da9080f8bc89a8092f1bbd


    Headers

    Imports

    Exports

    Sections

  • HCUsbSDK.dll
    .dll windows:6 windows x86 arch:x86

    fe8bcef7b50f369c3159942c222ff07e


    Headers

    Imports

    Exports

    Sections

  • HCVoiceTalk.dll
    .dll windows:6 windows x86 arch:x86

    94f17e6fecb070f4849c928b73896fe8


    Headers

    Imports

    Exports

    Sections

  • HXVA.dll
    .dll windows:6 windows x86 arch:x86

    fd617104889049e083a235bd94f1bf39


    Headers

    Imports

    Exports

    Sections

  • HmMerge.dll
    .dll windows:5 windows x86 arch:x86

    5ec1512186a0363060cc8a56239213ba


    Headers

    Imports

    Exports

    Sections

  • ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.zkemkeeper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Ionic.Zip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MP_Render.dll
    .dll windows:5 windows x86 arch:x86

    2407117410aea4ba4db6511c40a9d241


    Headers

    Imports

    Exports

    Sections

  • MP_VIE.dll
    .dll windows:4 windows x86 arch:x86

    56f918edd3feaefc7b8df9af992ce1f1


    Headers

    Imports

    Exports

    Sections

  • Mono.Security.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NPOI.OOXML.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NPOI.OpenXml4Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NPOI.OpenXmlFormats.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NPOI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NPQos.dll
    .dll windows:5 windows x86 arch:x86

    f89bd4fd07e52990f22b1871de663332


    Headers

    Imports

    Exports

    Sections

  • Npgsql.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • OpenAL32.dll
    .dll windows:4 windows x86 arch:x86

    cc1549330634b3d157bd461c0d3f31f7


    Headers

    Imports

    Exports

    Sections

  • PdfSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PlayCtrl.dll
    .dll windows:5 windows x86 arch:x86

    51cf9ad5a6879fee130ec04d5c4117da


    Headers

    Imports

    Exports

    Sections

  • Sadp.dll
    .dll windows:5 windows x86 arch:x86

    1b8ce6a3348fc2fed124ac2dafe33f71


    Headers

    Imports

    Exports

    Sections

  • StreamTransClient.dll
    .dll windows:6 windows x86 arch:x86

    7834ed1c56a84f49efeb132aacdcb426


    Headers

    Imports

    Exports

    Sections

  • SuperRender.dll
    .dll windows:5 windows x86 arch:x86

    83f3f5b82aadd07034f73dee3f424a22


    Headers

    Imports

    Exports

    Sections

  • Suprema.UFMatcher.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Suprema.UFScanner.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Data.SQLite.dll
    .dll windows:5 windows x86 arch:x86

    d497bf8dbb07ae2a3501c2fa425a8f5c


    Headers

    Imports

    Exports

    Sections

  • System.Data.SQLite.dll.config
    .xml
  • System.Windows.Forms.Ribbon.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SystemTransform.dll
    .dll windows:5 windows x86 arch:x86

    a9f05971ddb0d192afa17b5bfc1bf812


    Headers

    Imports

    Exports

    Sections

  • TBusiness.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TBusiness.dll.config
  • TCore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TLockSync.SQD
  • TLockSync.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • TLockSync.exe.config
    .xml
  • TLockUI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • TLockUI.dll.config
  • Themis.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • UFMatcher.dll
    .dll windows:5 windows x86 arch:x86

    421ef89669f1255a658635aadec0198f


    Headers

    Imports

    Exports

    Sections

  • UFScanner.dll
    .dll windows:5 windows x86 arch:x86

    9d0bb6fb996f5a5ec67b6321ca3b6d1a


    Headers

    Imports

    Exports

    Sections

  • WeifenLuo.WinFormsUI.Docking.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • YUVProcess.dll
    .dll windows:5 windows x86 arch:x86

    d6c8f27d8ae2a9e63c3ae7424bcdbfe3


    Headers

    Imports

    Exports

    Sections

  • ZKEUEmKeeperNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ZKFingerObj.dll
    .dll windows:5 windows x86 arch:x86

    24e53f512a24e84c7a1e25a0d6c3a146


    Headers

    Imports

    Exports

    Sections

  • commpro.dll
    .dll windows:5 windows x86 arch:x86

    e2ec494c3f4dfdb133b2c4ece5234b8d


    Headers

    Imports

    Exports

    Sections

  • comms.dll
    .dll windows:5 windows x86 arch:x86

    55dbf3720e2025b3f25a9618f58bd713


    Headers

    Imports

    Exports

    Sections

  • en/TBusiness.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • en/TCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • en/TLockSync.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • en/Themis.UI.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/TBusiness.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/TCore.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/TLockSync.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • es/Themis.UI.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • gdiplus.dll
    .dll windows:5 windows x86 arch:x86

    2a1ab6b72adad6b03d0746b0a5fa55d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hlog.dll
    .dll windows:5 windows x86 arch:x86

    e7fafdba9b32ce6499fd9ec65329e61d


    Headers

    Imports

    Exports

    Sections

  • hpr.dll
    .dll windows:5 windows x86 arch:x86

    27edd34cde7209c13a9626439a826538


    Headers

    Imports

    Exports

    Sections

  • lib_crypto.dll
    .dll windows:5 windows x86 arch:x86

    ef8d36640c36af2d411e07f74f5fc6bf


    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1.dll
    .dll windows:5 windows x86 arch:x86

    1a4728323839926a0cea4a4ffbbfc558


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    bf76bfdbfb2f04df3961cd140f67140b


    Headers

    Imports

    Exports

    Sections

  • libiconv2.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    5e63e66630a8ecd829ce2cfdcfa121ae


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1.dll
    .dll windows:5 windows x86 arch:x86

    51323f7c5066fa4b7d9421ea911bb803


    Headers

    Imports

    Exports

    Sections

  • libssl32.dll
    .dll windows:5 windows x86 arch:x86

    2063b55e294c91445f7d7c61361e1f0d


    Headers

    Imports

    Exports

    Sections

  • libusb0.dll
    .dll windows:6 windows x86 arch:x86

    1f046ef4cf54f131ad3d01beddbcff56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libzkfpcsharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • npf.sys
    .sys windows:6 windows x86 arch:x86

    5d756b1deabd7b6ee3f068c3a075da59


    Code Sign

    Headers

    Imports

    Sections

  • npf64.sys
    .sys windows:6 windows x64 arch:x64

    7973a97ee6904fb821131de309da29bf


    Code Sign

    Headers

    Imports

    Sections

  • p4p.dll
    .dll windows:5 windows x86 arch:x86

    c7f4e577332f072fceab96e852a888ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • p4pcomm.dll
    .dll windows:5 windows x86 arch:x86

    dfd7abc9cef1caf62aa354ebff882d56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plce.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • plcommpro.dll
    .dll windows:5 windows x86 arch:x86

    8d87deb0b68d89de0f2207752bb6ec93


    Headers

    Imports

    Exports

    Sections

  • plcomms.dll
    .dll windows:5 windows x86 arch:x86

    c666bb5bb15d4fd82c9daa8ff37ed981


    Headers

    Imports

    Exports

    Sections

  • plrscagent.dll
    .exe windows:5 windows x86 arch:x86

    5004fc9dfe8fe20294641f3e5240c572


    Headers

    Imports

    Sections

  • plrscomm.dll
    .dll windows:5 windows x86 arch:x86

    f61f15b6e0e640fb98944b48ceace64a


    Headers

    Imports

    Exports

    Sections

  • pltcpcomm.dll
    .dll windows:5 windows x86 arch:x86

    d4aca4395f46ce07cc0b2ebb47dbc584


    Headers

    Imports

    Exports

    Sections

  • plusbcomm.dll
    .dll windows:5 windows x86 arch:x86

    dfa37bf65815d4739f8fcfae3cb67b3e


    Headers

    Imports

    Exports

    Sections

  • rscagent.dll
    .exe windows:5 windows x86 arch:x86

    bf38c5ce38cd17210ecd889466737138


    Headers

    Imports

    Sections

  • rscomm.dll
    .dll windows:5 windows x86 arch:x86

    810d271162962f552724e3e13755c4f0


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    2063b55e294c91445f7d7c61361e1f0d


    Headers

    Imports

    Exports

    Sections

  • tcpcomm.dll
    .dll windows:5 windows x86 arch:x86

    402018c85aee93a894c4818fcfafb6ec


    Headers

    Imports

    Exports

    Sections

  • tupdate.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • tupdate.exe.config
    .xml
  • usbcomm.dll
    .dll windows:5 windows x86 arch:x86

    5d1c439a44474e62c6497245dab58420


    Headers

    Imports

    Exports

    Sections

  • usbstd.dll
    .dll windows:5 windows x86 arch:x86

    56663247dc242631d32dbfd97b748ac1


    Headers

    Imports

    Exports

    Sections

  • vcredist_x86-2012.exe
    .exe windows:5 windows x86 arch:x86

    33c6db41ca15b47cfcec52de6c2ab2b7


    Code Sign

    Headers

    Imports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    2262054530b5f8bbeb0c4e3a111a37eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zkemkeeper.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    180a06584971d0eed183714963f65ecb


    Headers

    Imports

    Exports

    Sections

  • zkemsdk.dll
    .dll windows:5 windows x86 arch:x86

    3c82f8cad756cfceb94453ad5e26dcb1


    Headers

    Imports

    Exports

    Sections

  • zkeucommpro.dll
    .dll windows:5 windows x86 arch:x86

    5531594ce33d86d8b220d9c382f950d0


    Headers

    Imports

    Exports

    Sections

  • zkeucomms.dll
    .dll windows:5 windows x86 arch:x86

    97da66595a1f22934aac17ff20a36679


    Headers

    Imports

    Exports

    Sections

  • zkeuemkeeper.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c1d7cb38f2a6153c8b53743a4c0df6f2


    Headers

    Imports

    Exports

    Sections

  • zkeuemsdk.dll
    .dll windows:5 windows x86 arch:x86

    628f84094cd1d38cc1fafebb4c7534f2


    Headers

    Imports

    Exports

    Sections

  • zkeurscagent.dll
    .exe windows:5 windows x86 arch:x86

    2f8b37f735c9c0567cf615a34c2f6160


    Headers

    Imports

    Sections

  • zkeurscomm.dll
    .dll windows:5 windows x86 arch:x86

    6944fc86a68036734e8db32b741e4c15


    Headers

    Imports

    Exports

    Sections

  • zkeutcpcomm.dll
    .dll windows:5 windows x86 arch:x86

    08a91f2d3d14b1991be38ea1abac3ccc


    Headers

    Imports

    Exports

    Sections

  • zkeuusbcomm.dll
    .dll windows:5 windows x86 arch:x86

    4c5a7db1273544e3840c6dac88e5a435


    Headers

    Imports

    Exports

    Sections

  • zkeuusbstd.dll
    .dll windows:5 windows x86 arch:x86

    eeeedb0b9e409275b0bb40d957b1f828


    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:6 windows x86 arch:x86

    6f4be74185d03129f61ecc4c33d0ce4c


    Headers

    Imports

    Exports

    Sections

  • zxing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections