General

  • Target

    9b53b9bbea835380e4158d8c2f7fb0d5

  • Size

    211KB

  • MD5

    9b53b9bbea835380e4158d8c2f7fb0d5

  • SHA1

    a2d8c8b81e418d596685fa2ca413a923446e39c6

  • SHA256

    791c610934ece4b28672be4062e88de465e0412e1431bf64d35f4fe7e254577a

  • SHA512

    b29c1b35e1a57251f1bde7ca06177d13270ed7cb4cb83425a55bf838ccdabe72d709eccd1763af8ba1930b20ae91409ab5c4b588b0944b41b5e9733802111d07

  • SSDEEP

    6144:IbO+8ve5I3n4Y8NUvw2GeeYEsSmBSaXLYVSjMEAWGyY:qQeY4Y8NUjeYtXLYVSjMtW3Y

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9b53b9bbea835380e4158d8c2f7fb0d5
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/shlapimext.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TRNSCoderV4.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    36aae77e75442d4ea20a1d1581b71ee8


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9c523d8653da5455667e3f82274f2f88


    Headers

    Imports

    Sections