Overview

overview

7

Static

static

7

c6b009e6c1...f5.dll

windows7-x64

7

c6b009e6c1...f5.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    61b6a41943a8c56fb75606e6864b5bb4.bin

  • Size

    151KB

  • MD5

    2e6b8e3703db2c2212010c3b08f731a5

  • SHA1

    8106c5c0b6a5797f17a318804cb8c06ad8a7dce0

  • SHA256

    8e54627c80d285b5e862c70fe41b42633af61f315153cb8501f48fda79c7252a

  • SHA512

    8d80d72f31ae55c16bcb10427000a4c995c860ad9204a519188c854f90471584a5c9c35a9655cb2cadfa567a6b61341b6b048ae25e82b9eb3feb2a885bad1fe3

  • SSDEEP

    3072:jhBME73wCoA1eAXDyd3n5Fbdi6EBLjKOjlsXPrKbX3SZg:jIu3wCo6XTyd3n5zi6ENKOjmObHYg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61b6a41943a8c56fb75606e6864b5bb4.bin
    .zip

    Password: infected

  • c6b009e6c1342c48aafe38bfaa42d1d3bbd12da84bd18c3bd745749667824cf5.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections