General

  • Target

    9bbde18ec589998033bb419bcf952fa6

  • Size

    7.4MB

  • MD5

    9bbde18ec589998033bb419bcf952fa6

  • SHA1

    d64f6cea5c8ee85983c4b720ded6b13f560845b9

  • SHA256

    58abf260c230baf7802208d1dbfbfc0d264c335a3daa0a732caabcad4bbc81d4

  • SHA512

    d254a69d6a8c4d99ccb99b9a57e13a4cf2366c702fa00f70bfe227935271a1577c8c3fd3ab24564471b5288f792596c2b888385217a3f6ddc178ad89881b0bb1

  • SSDEEP

    196608:bdb8Kz2eJQv5PdMipToT4TaYvZrUZS52YShjC/yz7cumzhK0:p8K0v9dMQxOwj2YShjC/qyzhK0

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 33 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 38 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 57 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 9bbde18ec589998033bb419bcf952fa6
    .rar
  • Alcohol.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Alcohol120_retail_1.9.6.5429.exe
    .exe windows:4 windows x86 arch:x86

    c6ec2286dd1d610e91f6cf961129a7e3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    922b855d216a21490e4bcbf6c29b7f7d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/alcsetup.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/setuphlp.dll
    .dll windows:4 windows x86 arch:x86

    d0125dd77bf12adcd3b46c04948d5114


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msxml2.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    fd3e97d1a321f0144f165f7ba65a857f


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msxml2r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $TEMP/MX_SWinst.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/SPTDinst.exe
    .exe windows:6 windows x64 arch:x64

    1d549cf2cf768559767e4a8addba4dee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • AXShlEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Alcohol.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • AxCmd.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • AxShlEx64.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    ac9eac98c02b12e63217a0ba10d1fe18


    Headers

    Imports

    Exports

    Sections

  • AxShlEx64Helper.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • AxType.ini
  • DevSupp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Help/ax_enu.chm
    .chm
  • Langs/AX_AR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_BUL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_CAT.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_CZ.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_Chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_Cht.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_DA.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_ES.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_FI.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_FR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_GE.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_GR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_HR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_IT.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_JPN.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_KR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_MK.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_NL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_NO.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_PL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_PT.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_PT_BR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_RU.dll
    .dll windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • Langs/AX_SK.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_SLV.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_SR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_SV.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_TR.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Langs/AX_UA.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MX_RegShlEx64.exe
    .exe windows:4 windows x64 arch:x64

    e4eda295b362726c564552041aa80602


    Headers

    Imports

    Sections

  • Plugins/AxSWind.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • Plugins/Images/bw5mount.dll
    .dll windows:4 windows x86 arch:x86

    6c8408bb5d7d5a5b75b9314f94e68763


    Headers

    Imports

    Exports

    Sections

  • Plugins/Images/bwtmount.dll
    .dll windows:4 windows x86 arch:x86

    fdc28fc29951777f4e3b0069e2b1a5dd


    Headers

    Imports

    Exports

    Sections

  • Plugins/Images/ccdmount.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Images/cuemount.dll
    .dll windows:4 windows x86 arch:x86

    fdc28fc29951777f4e3b0069e2b1a5dd


    Headers

    Imports

    Exports

    Sections

  • Plugins/Images/iszmount.dll
    .dll windows:4 windows x86 arch:x86

    54c6e47cc1132cda3fc880d47d012f58


    Headers

    Imports

    Exports

    Sections

  • Plugins/Images/nrgmount.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Images/pdimount.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plugins/Images/pfcmount.dll
    .dll windows:4 windows x86 arch:x86

    7f4a860ed4205cc5c473e45c2aeb4465


    Headers

    Imports

    Exports

    Sections

  • Plugins/dpm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • StarWind/StarWindLite.cfg
    .xml
  • StarWind/StarWindServiceAE.exe
    .exe windows:5 windows x86 arch:x86

    a92a82f0e388cb634f337150a997067d


    Headers

    Imports

    Sections

  • StarWind/StarWindServiceAE.pdb
  • StarWind/config.xsd
    .xml
  • StarWind/license.txt
  • alcoholx.dll
    .dll windows:4 windows x86 arch:x86

    a255146e1d49c85ea6fb6f0c55de5886


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cryptapi.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • pfctoc.dll
    .dll windows:4 windows x86 arch:x86

    92dc1350050c1104b682cc5ee133e008


    Headers

    Imports

    Exports

    Sections

  • star_syn_client.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    7e3560e4dd2deaa398fa039458dd4b4b


    Headers

    Imports

    Exports

    Sections

  • ReadMe en.txt
  • register.reg
  • 新云软件.url
    .url