4a691b69c11387b2c2e19e50c27e3c80

General

Target
4a691b69c11387b2c2e19e50c27e3c80
Size 66KB
Sample240108-etpljaahck
SHA256 e96c7628029915b660036bc40e41a38bbba7ea445c485274ab87c88016158a3f
MD5 4a691b69c11387b2c2e19e50c27e3c80
SHA1 7ae3ae8390af4c2c39cf14cd26699e24b04ce4ec
SHA512 f33d85d15081910f063d8667870a1812d2e9b877a3a96ddb7471fdf33049d83b0bc12bfc1a7449514c922c74e5c6c14b686d6d2148ef13342ba78ea626c84248
SSDEEP 1536:GyLua1K0xP0DBCfdq6Zx/HRNVLRpedZk7hQB5ZmUOMt+eE:GscxifRbRwxOMt+p
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
4a691b69c11387b2c2e19e50c27e3c80
unpack001/out.upx

File Explorer

4a691b69c11387b2c2e19e50c27e3c80

.dll 66KB
out.upx

.dll 148KB

4a691b69c11387b2c2e19e50c27e3c80

SHA256 e96c7628029915b660036bc40e41a38bbba7ea445c485274ab87c88016158a3f
MD5 4a691b69c11387b2c2e19e50c27e3c80
SHA1 7ae3ae8390af4c2c39cf14cd26699e24b04ce4ec
SHA512 f33d85d15081910f063d8667870a1812d2e9b877a3a96ddb7471fdf33049d83b0bc12bfc1a7449514c922c74e5c6c14b686d6d2148ef13342ba78ea626c84248
SSDEEP 1536:GyLua1K0xP0DBCfdq6Zx/HRNVLRpedZk7hQB5ZmUOMt+eE:GscxifRbRwxOMt+p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

264784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

out.upx

SHA256 7f7be50fc77e591a33df61fc24a24e4f176d0e4f141a78188544bd19370e9b9e
MD5 0f7950513882964d1396da0e40b94165
SHA1 f3470d930edcfbefd919760ad0b2ae5ad4393f60
SHA512 a2a5618aa3ea6d4094db3a6dec8499c39e796cd50a5341e8f7e82b6426ce28bc4fb3f5c603231a2e50c9220ef85edc1de49e2db4d258061d08768edb12b3d281
SSDEEP 1536:IvTsk8imoH3/ig0j/eQKcb0Nm+BCYRLtOuJSysJw/8Y9kHaOnJ9P5ju7/a9Z9l:IQxiFH0dK/7tOC/8Y+LPFuDa9ZX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

69021

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

4a691b69c11387b2c2e19e50c27e3c80

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

4a691b69c11387b2c2e19e50c27e3c80

generic

out.upx

generic