General

  • Target

    41ee559f28e5ccd04236ac5caa939ad1dab73652f827d1961cc86fb99d851a0e

  • Size

    81KB

  • MD5

    32e8a3ab6435504f7cdecd6d8f61acaf

  • SHA1

    3159ea3a52c942d7bfdb9d7f8296c01eca1303ed

  • SHA256

    41ee559f28e5ccd04236ac5caa939ad1dab73652f827d1961cc86fb99d851a0e

  • SHA512

    b549ff7656d655decbe887ffd8af52914484441465bfb6036eb5961d581398f47d18e9100901b18dfef7b4e45f0f3d2f3b0d6790ae728c53a089b2ebbdedb275

  • SSDEEP

    1536:eMohBAdAMD2NCMFNQGVLS/n83WrkBPUGyVvbfDUZwC59QGIafA+dCj4:ehhBAdTCNCWNQwLS/n5q3yVvbfAZwm8M

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 41ee559f28e5ccd04236ac5caa939ad1dab73652f827d1961cc86fb99d851a0e
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections