General

  • Target

    4d598d5416a2bb338cbb4a5b07ac510a

  • Size

    1.6MB

  • MD5

    4d598d5416a2bb338cbb4a5b07ac510a

  • SHA1

    b3f3f2c4587c2e6f5f025ca0698e03e263219685

  • SHA256

    4d7e3897c221eaf338d14ed7f4768552e565b4372c4dc462b4b2e05816f05e71

  • SHA512

    6f324809466d0801d4220057fade6dc60b2648ba61bb6d3ba46708fd63dcd875bfea7b14c65c115823adf733ed1a19fcb1b20dcb7ea01008e3d44ddd51717e4d

  • SSDEEP

    49152:GLifKeOuNyB5LgqBGDP5ZQ9HwzXafABmdrcLsgWX:ZdOuNk5LNsLmHwTaxr/

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d598d5416a2bb338cbb4a5b07ac510a
    .rar
  • bgsyxzs/Skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bgsyxzs/使用说明.txt
  • bgsyxzs/办公室游戏助手v2.3.exe
    .exe windows:5 windows x86 arch:x86

    16b34e20693f4ef7a3b34d97abdd00ab


    Headers

    Imports

    Sections

  • bgsyxzs/统一下载站.url
    .url