General

  • Target

    b853ff048521c2a5ac8e511b2729f4ef

  • Size

    275KB

  • MD5

    b853ff048521c2a5ac8e511b2729f4ef

  • SHA1

    741dfdc02b9854e689a886a0fc240da66f004581

  • SHA256

    3a747c9978ffd247b7f696abfa0395318e7c1af8323cf91006e9df7fa36723e8

  • SHA512

    166badf5da431f611ebe94a8cca30c6dc87847732977905e92172ab172f2a0adacce665ea20276b63cc722bc9c77947dfecebcfc8b69c32d160552984d810b25

  • SSDEEP

    3072:SQIURTXJTy0pZcZH5qf5IX3LOgI+GRfURySBplu+7hqeQW9P7Qao5VW9fGijMnWP:Ssc0z8eOOgIPYflu+Q0EXq9fGije5w

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • b853ff048521c2a5ac8e511b2729f4ef
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/1clogo.bmp
  • $PLUGINSDIR/DlgHost.dll
    .dll windows:4 windows x86 arch:x86

    502ba7296e72d77bbd3a08bba88ca13d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/IM.bmp
  • $PLUGINSDIR/IMlic.txt
  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    1834d1491353abf52e577c4e04b6e4e3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SIMlic.txt
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/accept.bmp
  • $PLUGINSDIR/accept1.bmp
  • $PLUGINSDIR/accept2.bmp
  • $PLUGINSDIR/accept3.bmp
  • $PLUGINSDIR/bab.bmp
  • $PLUGINSDIR/bab_off.bmp
  • $PLUGINSDIR/bab_on.bmp
  • $PLUGINSDIR/bablic.txt
  • $PLUGINSDIR/buzz.bmp
  • $PLUGINSDIR/decline.bmp
  • $PLUGINSDIR/fm.bmp
  • $PLUGINSDIR/fmlic.txt
  • $PLUGINSDIR/inc.bmp
  • $PLUGINSDIR/inetc3.dll
    .dll windows:5 windows x86 arch:x86

    1dd454ac5c9407d14ae23ee8e8cd4203


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRichEdit.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/sIM.bmp
  • $PLUGINSDIR/side.bmp
  • $PLUGINSDIR/skip.bmp
  • $PLUGINSDIR/stvheader.bmp
  • $PLUGINSDIR/yontoo.bmp
  • $PROGRAMFILES/DRHTVApp.com/$PROGRAMFILES/DRHTVApp.com/uninst.exe.nsis