General

  • Target

    03afe94ccfe454797c3dd979c851e91fc5756f95dd4ec4aebf45032b51fb9cb8

  • Size

    1.1MB

  • MD5

    7429cf43363995be2987e88183614c2e

  • SHA1

    c33717a68e959b65d05d5edbf51838768d3e0080

  • SHA256

    03afe94ccfe454797c3dd979c851e91fc5756f95dd4ec4aebf45032b51fb9cb8

  • SHA512

    631b3e8a2a1d5f8d884e788378d7f230d993fb602761160877e18d930f0e36aac69bb0ce37562210ca79320fd22ec135a4834c5e73279689fb9afd3c340cd3a9

  • SSDEEP

    12288:Jg44Az765h/arq6BmwA0g/dv+iUJY57xQMUkWIJpE:607Qarq6BmEWJ+bY5UVIQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 03afe94ccfe454797c3dd979c851e91fc5756f95dd4ec4aebf45032b51fb9cb8
    .exe windows:5 windows x86 arch:x86

    c86b02c21ff392ad6ffcf21dcd4a5588


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AdvancedTests.lua
  • $PLUGINSDIR/BrowserControl.lua
    .js
  • $PLUGINSDIR/BundleInstall.lua
    .js
  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CallbackProxy.lua
    .js
  • $PLUGINSDIR/CustomBrandingURL.dll
    .dll windows:5 windows x86 arch:x86

    82f18b0f522c05f362fb12db10cdf296


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/DownloadList.lua
    .js
  • $PLUGINSDIR/DownloadThread.lua
  • $PLUGINSDIR/Downloads.lua
    .js
  • $PLUGINSDIR/EagerInstall.lua
    .js
  • $PLUGINSDIR/Env.lua
  • $PLUGINSDIR/Events.lua
  • $PLUGINSDIR/FloatingProgress.dll
    .dll windows:5 windows x86 arch:x86

    6ef0ba2a59a41ea0d58313176f4f9149


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GuiInit.lua
    .js
  • $PLUGINSDIR/IntegratedOffer.lua
  • $PLUGINSDIR/LuaBridge.dll
    .dll windows:5 windows x86 arch:x86

    684d69cecad40df038cf956d0f874728


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaSocket/lua/ltn12.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/mime.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/http.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
  • $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
    .js
  • $PLUGINSDIR/LuaSocket/lua/socket/url.lua
  • $PLUGINSDIR/LuaSocket/mime/core.dll
    .dll windows:4 windows x86 arch:x86

    fe8e49b45d854066bc51a41f61066908


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaSocket/socket/core.dll
    .dll windows:4 windows x86 arch:x86

    f7bb4b78321004f93f7e54fe50af1981


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LuaXml.lua
  • $PLUGINSDIR/LuaXml_lib.dll
    .dll windows:4 windows x86 arch:x86

    0e4b7cfc82eb1d2e2840274f1659b95a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NotifyIcon.dll
    .dll windows:5 windows x86 arch:x86

    e043e246d8abcbb9de2ad82c6e18cd88


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NotifyIcon.lua
  • $PLUGINSDIR/ProcessFreeFile.lua
  • $PLUGINSDIR/Sandbox.lua
    .js
  • $PLUGINSDIR/Scheduler.lua
    .js
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UACInfo.dll
    .dll windows:5 windows x86 arch:x86

    0603f1e5036bb7e26cc82e7875b30a9b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UiState.lua
  • $PLUGINSDIR/__localxml.xml
  • $PLUGINSDIR/customNsWeb.dll
    .dll windows:5 windows x86 arch:x86

    c406b41faef9d450d598369f4d24e810


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/definitions.lua
  • $PLUGINSDIR/extension.tlb
  • $PLUGINSDIR/json.lua
  • $PLUGINSDIR/lua51.dll
    .dll windows:4 windows x86 arch:x86

    44f55f1a39528e86ccc7e8eb308af99f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/luacom.dll
    .dll windows:5 windows x86 arch:x86

    148172081107200e70753e16a32c0c9a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    90eea478feb0667dcdd7bccb241e74b3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:5 windows x86 arch:x86

    4c04c20a976733bf789fead96eb58701


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisunz.dll
    .dll windows:4 windows x86 arch:x86

    0f92772da9c737d2bac38919e9863980


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/skin/res/common.css
  • $PLUGINSDIR/skin/res/common.js
    .js
  • $PLUGINSDIR/skin/res/jquery.js
    .js
  • $PLUGINSDIR/skin/res/knockout.js
    .js
  • $PLUGINSDIR/un.package.exe
    .exe windows:5 windows x86 arch:x86

    35b698a6fd5038f719a27b089cb1f48e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/utils.lua
    .js
  • $PLUGINSDIR/version.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections