General

  • Target

    A120FE_9902_PE.zip

  • Size

    2.9MB

  • MD5

    4bc67ccc7a6bb1f98700ef4bbc56cce3

  • SHA1

    186a9970e6e36ba01f70710adad641bfbcb17baf

  • SHA256

    f8ad9faf080b74e76e3bc44d258bc39b4074bdd1fcd7d020e35bce922bc35a19

  • SHA512

    1296033ffe31a77ded12a527727b759293a6e3d4e606bdb8cf99d10d1043ea58b214ff5fcbf7f6de132240198c0aeee21ae1e06b92000c065941b055acf533ec

  • SSDEEP

    49152:87urDBoTiskHrxlxvbMeE2yj/NkHlOqGdVZvsoyUycmPIPOtUYVUZh07qnO/5wCw:8irDBoesk7FVE2yj/uO3FsoytlQ2ojSU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • A120FE_9902_PE.zip
    .zip
  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/Alcohol.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/AxType.ini
  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/DevSupp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/EnableLogging.reg
  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/Plugins/AxtraWd.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/Plugins/DPM.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/Plugins/DPMChart.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/imgengine.dll
    .dll windows:5 windows x86 arch:x86

    d503f319bb4b13f0c9c778febbe17bcd


    Code Sign

    Headers

    Imports

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/pfctoc.dll
    .dll windows:4 windows x86 arch:x86

    92dc1350050c1104b682cc5ee133e008


    Headers

    Imports

    Exports

    Sections

  • Alcohol 120% FE (2.0.3.9902) (Portable Edition)/pidalc.dll
    .dll windows:5 windows x86 arch:x86

    867b0f77234da74fa017e86153dbb7bb


    Headers

    Imports

    Exports

    Sections