Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Arar by AMP Tecnología.rar

  • Size

    621KB

  • MD5

    44bc4f1745178d954142499bd31ec9a5

  • SHA1

    fedc905e5d4784328daf97ad65b76c06a013b5bc

  • SHA256

    f15ddd8bab9f57b5c42f540f1320e6c1442c5cef65ab25829776a5f4590917c9

  • SHA512

    3a63f45b353e872042f1f520aa8c39d8d4b3ea7c3989a193fae27065c29d355185c056c6d3d3cbe1e629798c0c754ea9d4eda29a3318bd3987e80b67839df44a

  • SSDEEP

    12288:lZzOO/t4UA6iqgdxms5m7d55hFfF+JVo4Z81NDwGdhxkZxA:HzOctkDNdxmsIBjD4Jm4cwGfxIxA

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Arar by AMP Tecnología.rar
    .rar
  • Arar by AMP Tecnología/ARAR.cnt
  • Arar by AMP Tecnología/ARAR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Arar by AMP Tecnología/ARAR.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • Arar by AMP Tecnología/ARAR.hlp
  • Arar by AMP Tecnología/ARARSHL.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Arar by AMP Tecnología/UNWISE.EXE
    .exe windows:4 windows x86 arch:x86

    98a092509a857ae89ee89314ec0f5a4c


    Headers

    Imports

    Exports

    Sections