General

  • Target

    686b3a91d1a1c70c6e48705f28b66e8d

  • Size

    231KB

  • MD5

    686b3a91d1a1c70c6e48705f28b66e8d

  • SHA1

    2a8612f148d70b2dfaec375272a49a8bb8ace801

  • SHA256

    13adabbdef4404ace96707bac89c3ebbbc2c72e2f36e407304fb6f8b8d195d1d

  • SHA512

    b5eae8c21a025a57bfd416d78b432244ad955cafcff1f667094c575378a6fa46190575bc03f651b620a736f6c219469cb48dfa95b9c02e876131968fe1ab7269

  • SSDEEP

    6144:msV7FOtyRlWx7TrhLW4QESNQUJAuoqXwMyGh5TUVF:jkQRlWxoN1JA/qA+hxqF

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 686b3a91d1a1c70c6e48705f28b66e8d
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/DlgHost.dll
    .dll windows:4 windows x86 arch:x86

    502ba7296e72d77bbd3a08bba88ca13d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IM.bmp
  • $PLUGINSDIR/IMlic.txt
  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SIMlic.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/bab.bmp
  • $PLUGINSDIR/bab_off.bmp
  • $PLUGINSDIR/bab_on.bmp
  • $PLUGINSDIR/bablic.txt
  • $PLUGINSDIR/box.bmp
  • $PLUGINSDIR/box2.bmp
  • $PLUGINSDIR/box3.bmp
  • $PLUGINSDIR/buzz.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/fm.bmp
  • $PLUGINSDIR/fmlic.txt
  • $PLUGINSDIR/inc.bmp
  • $PLUGINSDIR/inclic.txt
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/stvheader.bmp
  • $PLUGINSDIR/stvheader2.bmp
  • $PLUGINSDIR/v_sign.bmp
  • $PLUGINSDIR/x.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/PutLockerDownloader.com/$PROGRAMFILES/PutLockerDownloader.com/uninst.exe.nsis