General

  • Target

    VirusShare_c4a164a825a5b2fdae591f616cb5642b

  • Size

    180KB

  • MD5

    c4a164a825a5b2fdae591f616cb5642b

  • SHA1

    899b1625b4121cd8f4a94d4a60bd4a1664f80294

  • SHA256

    b1ebcefcd3430cea6ddc3f897c21b8cad684bcd1583969d38fb413f59f78b142

  • SHA512

    7bd63d2971ea263b5190dc6bd8193bc3d6f1606dbe5279f4d24c8dabe779e325ed9c328020f9454fe0db842e07dbd39c46c40243c63886c5b35f9f63f810caaa

  • SSDEEP

    3072:EQSOaPkL+ASzSMEdcv5Eo9w60YRb+UiOs2nxuZq1QZIMSEJ7tlCXi9qRAGU8ZrBH:mG+ASK6ySp0YRb+UiOxxzQyMSa7tsXiM

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • VirusShare_c4a164a825a5b2fdae591f616cb5642b
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections