General

  • Target

    c3f6bc64e53ced5b0e8c4afec374e7e9

  • Size

    654KB

  • MD5

    c3f6bc64e53ced5b0e8c4afec374e7e9

  • SHA1

    590d7f0fea020d30e1a1415440f47931f195a85a

  • SHA256

    366a9b04b59953302031d3d605199168ad490dbe3be027a993a19c2108ba291e

  • SHA512

    32b57f9f45dcab49ed4705239f8f70f6c2736645fdd7460c4d384aeab52c1d9807d8799de907af87890cdd5e00594f9b1af45a5a43db465150e92a6c54126f2a

  • SSDEEP

    12288:7FZpmelujNvv/iZitEd+CRblkngPKqOMTRwBuwoOJDGidfCDqsEHASrHuBH3vxOU:7FIvKZiud+CRblkngPKqOMTRwBu7OJ6n

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • c3f6bc64e53ced5b0e8c4afec374e7e9
    .rar
  • TommComm.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TommProcExplorer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url