General

  • Target

    b4d8c1dfb94fd94af6973dcce7a07954

  • Size

    682KB

  • MD5

    b4d8c1dfb94fd94af6973dcce7a07954

  • SHA1

    15877c6dbe21493c9efc82b0aacfb5420860c89f

  • SHA256

    077b59d965336ad14437c7b65c0114295fb6b30137bb0a5ffc4a881dabb7fa95

  • SHA512

    e71254094de31b9f8766ecbfb3220efbbfb36ede924c137ed253f36d59e3a31b702969b34f41d8bdc90547cceeca60b82dc8844d7d639bf4d2b6b9cd4ef9dcad

  • SSDEEP

    12288:RugcdaSwsOVJdYGdBluILHlgGqPvuJLKpVJUbznZ2sjrDBAq+F+6AGyEYJZ:TdX9BauJWpVSfoif6XAZ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b4d8c1dfb94fd94af6973dcce7a07954
    .rar
  • keyhook.dll
    .dll windows:4 windows x86 arch:x86

    2be24a2b0d9975b486ea4046bb40c21d


    Headers

    Imports

    Exports

    Sections

  • svchost.exe
    .exe windows:4 windows x86 arch:x86

    114a8e3a1247b91278010aab85fb0d7f


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url
  • 绿光键盘屏幕记录器v1.2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 说明.txt