General

  • Target

    8b6042db7aeb1f30103ca9c89942e8a3

  • Size

    4.5MB

  • MD5

    8b6042db7aeb1f30103ca9c89942e8a3

  • SHA1

    441f12f2b01077e761fa7f1bd2f9f4fda9e814b9

  • SHA256

    8b8869eb2a24495328e0b940ae7b375041d1371cf2306d5764e077564bab8df3

  • SHA512

    4282b9d4b0730ff22f4bd419e58b32b658f29b6a7be3d0dff3ad2301dd71896947b1f24dd63dfefc72a386eb3019a18b2e17ff453bfafb2fc716a86b5aa573f7

  • SSDEEP

    98304:aPtjGOhFC0kqhnskTKcYFLJJmytTS9hzjH1iXR/Sgc+LslHHW:gjGmFCqhnskTCds0T2uVPAJ2

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b6042db7aeb1f30103ca9c89942e8a3
    .rar
  • eLiveMovie_Setup.exe
    .exe windows:4 windows x86 arch:x86

    77981b5ba545434d9901140945938c3a


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Math.dll
    .dll windows:4 windows x86 arch:x86

    fedb8e95b3698a6c05b69204d3c2de7a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • ActivationReporter.dll
    .dll windows:4 windows x86 arch:x86

    52ed1945f9095334df1fd8a148d2a19e


    Headers

    Imports

    Exports

    Sections

  • Configure.dat
  • DataCollector.dll
    .dll windows:5 windows x86 arch:x86

    733ce73da47ba792b0a4f1e1c492d79e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT.manifest
    .xml
  • Plus/install_flash_player_ax.exe
    .exe windows:5 windows x86 arch:x86

    2bdb3f8e4a236153c327872fbf3556d1


    Code Sign

    Headers

    Imports

    Sections

  • Protocol/eLiveMovieChk.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Protocol/eLiveMovie_Protocol.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • eLiveMovie.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • eLiveMovie_Up.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • loading.swf
  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • 新云软件.url
    .url