Overview

overview

7

Static

static

7

pwdmana/PswDll.dll

windows7-x64

1

pwdmana/PswDll.dll

windows10-2004-x64

7

pwdmana/�...��.exe

windows7-x64

7

pwdmana/�...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4eeccb3ab6a1bbb82b98298ab52d81ad

  • Size

    929KB

  • MD5

    4eeccb3ab6a1bbb82b98298ab52d81ad

  • SHA1

    5bf90ed73a9f6284005dc45c45bcd9b9b017ab64

  • SHA256

    b38e18f7055a8773a06fc900adf5f8361b12ecdf363f59ab54bd687594e54969

  • SHA512

    7d24279684f35b37962d519e343d25ca1b4008a44d1199779239f0cf6f61d95b91a21937fa33816cc31cd68eda5713f68eb412ed49ddf26ea5a1292c3afaa61c

  • SSDEEP

    24576:RUPxNWPga5LB9uUvDae3XPiTeOFrg011kH6s4UoxojHoNv5o:RmQTuLUX0pFrH1kH6f+jINv5o

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 4eeccb3ab6a1bbb82b98298ab52d81ad
    .rar
  • pwdmana/PswDll.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • pwdmana/pwdmana.ini
  • pwdmana/readme.txt
  • pwdmana/skin/天高气爽.ski
  • pwdmana/skin/淡黄深秋.ski
  • pwdmana/skin/深闺幽怨.ski
  • pwdmana/skin/现代生活.ski
  • pwdmana/skin/生机盈然.ski
  • pwdmana/skin/生机盈然2.ski
  • pwdmana/skin/电路迷宫.ski
  • pwdmana/skin/电路迷宫2.ski
  • pwdmana/skin/蓝色月光.ski
  • pwdmana/skin/边缘地带.ski
  • pwdmana/skin/边缘地带2.ski
  • pwdmana/skin/金属质感.ski
  • pwdmana/下载说明.htm
    .html .js polyglot
  • pwdmana/风之铃密码箱.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot