Alloc
Call
Copy
Free
Get
Int64Op
Store
General
-
Target
c5c869c6fc0fcdc656eb45d0a1a72c1a
-
Size
3.4MB
-
MD5
c5c869c6fc0fcdc656eb45d0a1a72c1a
-
SHA1
5e99e466e9641a2d4eb1d4fe2ef8f6d569636b7c
-
SHA256
df3c1599380390e3546b539ee5a8445f63516c69bfe8503d1f0d061ac418916b
-
SHA512
3a315550022a26a49f8ec455c5a84f887c9d47bc3658c6dc2ce25f8f3c287a335131649f4c62b4d8a5bff5c97e95982579ad38f4281fcc98921a8a2488c2d2bc
-
SSDEEP
98304:/sTHpFT+zgmr708+pEJcp75YPpx776d9LA9D:/sTrcr7WpUcpUD72dVg
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 2 IoCs
Files
-
c5c869c6fc0fcdc656eb45d0a1a72c1a
7fa974366048f9c551ef45714595665e
Headers
Imports
Sections
-
$PLUGINSDIR/System.dll
2017f2acbdaa42ab3e4adeb8b4c37e7b
Headers
Imports
Exports
Sections
-
$TEMP/A7326012/7za.dll
3726b8c597bbd6bac65abe3d0400a84f
Headers
Imports
Exports
Sections
-
$TEMP/A7326012/COMMENT
-
$TEMP/A7326012/COVER
-
images/bg1.png
-
images/bg2.png
-
images/bg3.png
-
images/bg4.png
-
images/bg5.png
-
images/bramus/percentImage.gif
-
images/bramus/percentImage.png
-
images/bramus/percentImage_back.png
-
images/help.png
-
images/icons/add.gif
-
images/icons/empty.gif
-
images/icons/fill.gif
-
images/icons/get.gif
-
images/icons/minus.gif
-
images/icons/set.gif
-
images/img.jpg
-
images/pgl.png
-
js/bramus/jsProgressBarHandler.js
-
js/prototype/prototype.js
-
lic.html
-
page-reg.html
-
page.html
-
page2.html
-
page3.html
-
page4.html
-
page5.html
-
$TEMP/A7326012/CST
-
$TEMP/A7326012/FLIST
-
$TEMP/A7326012/IDV
-
$TEMP/A7326012/INFO
-
$TEMP/A7326012/PICTURE
-
$TEMP/A7326012/ico.dat
-
$TEMP/A7326012/sfx7.dll
60962b30a3658e6395ac82cf3b42e3c2
Headers
Imports
Exports
Sections
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/COMMENT
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/COVER
-
images/bg1.png
-
images/bg2.png
-
images/bg3.png
-
images/bg4.png
-
images/bg5.png
-
images/bramus/percentImage.gif
-
images/bramus/percentImage.png
-
images/bramus/percentImage_back.png
-
images/help.png
-
images/icons/add.gif
-
images/icons/empty.gif
-
images/icons/fill.gif
-
images/icons/get.gif
-
images/icons/minus.gif
-
images/icons/set.gif
-
images/img.jpg
-
images/pgl.png
-
js/bramus/jsProgressBarHandler.js
-
js/prototype/prototype.js
-
lic.html
-
page-reg.html
-
page.html
-
page2.html
-
page3.html
-
page4.html
-
page5.html
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/FLIST
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/IDV
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/INFO
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/Inst.nsi
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/PICTURE
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/ico.dat
-
C:/Documents and Settings/Admin/Application Data/CashMagnat/Build/ico.ico
-
/1178_knifebot-autokn.rar
-
1178_knifebot-autokn/knifebot(autoknif)/Knife Bot.exe
Headers
Sections
-
/289_CD-Hack_8.2.rar
-
CD-Hack 8.2/cdhack.cfg
-
CD-Hack 8.2/cdhack.dll
Headers
Exports
Sections
-
out.upx
Headers
Sections
-
CD-Hack 8.2/cdhack.exe
Headers
Sections
-
out.upx
Headers
Exports
Sections
-
CD-Hack 8.2/info.txt
-
CD-Hack 8.2/keys.txt
-
/638_opengl32.rar
-
opengl32.dll
Headers
Exports
Sections
-
out.upx
Headers
Sections
-
/76_WH.rar
-
/FGC Wallhack [-v7-].zip
-
/ReLoaded-BHop_Hack_1.1_by_Oblivion291_-_ThePack.rar
-
/cd_hach_7.1.rar
-
/m1dge_Public_Aeq_voiplay.rar