General

  • Target

    5982ba93164b2810e67c133c9f7215e0

  • Size

    1.3MB

  • MD5

    5982ba93164b2810e67c133c9f7215e0

  • SHA1

    4b3fb397b2b8013447c677abeac221679a71481f

  • SHA256

    489462252a8dd7cd9c921ac3f044696bacfed8135bd74560da3738705e9f93bf

  • SHA512

    b6753aa0bd989e410d36f681320d6a0850a51a173c57649b84d5a193342cccda2ce7572afe71d9b0130f6eb25ca1a86f87836b0cf83b52cb8fed87fd6678d729

  • SSDEEP

    24576:zKzlxaGv9VH6wDtgKzbmLKAEy2dC0XBqeWr8F/o0vGvN8YibuWXjK+gXANu0E5UU:zslxaGvbt/bQKAEy2dBRPWQJQVGuWzKt

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 5982ba93164b2810e67c133c9f7215e0
    .rar
  • Menu.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    002d464f5542e4ac4014a0becc3edf83


    Headers

    Imports

    Exports

    Sections

  • Mp3.dll
    .dll windows:4 windows x86 arch:x86

    17831cd6d91ae3f26684dc05c2bd46a4


    Headers

    Imports

    Exports

    Sections

  • Mp3RainBow.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Mp3RainBowSet.ini
  • Mscomctl.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MusicInfo.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • MusicLyrics.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Support/DriveDir.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0f69d3c1560bf9e9f641c604fce7014


    Headers

    Imports

    Exports

    Sections

  • Support/vb6chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/新云软件.url
    .url
  • What's New.txt
  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bass_ape.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • bassflac.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • basswma.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections