General

  • Target

    cd7cf45e1f43a8d7cb02b7382f7bfde0

  • Size

    3.6MB

  • MD5

    cd7cf45e1f43a8d7cb02b7382f7bfde0

  • SHA1

    01b2359ec124ab4c5dc0f3c536cdc3010d218bb0

  • SHA256

    39658349d02972f312439b21c12aa07690c7986611fcc8dace5d927a8a03189f

  • SHA512

    1e7f6ab294b47f8a7b71fa3e58f70c343c7a7ddde473082f34b360bc1670cd59ca7fdf3fde9499b36e82d5cac40dd4145abdfc7b99ce52fb331612e77db1dd66

  • SSDEEP

    49152:0GIMNT5fjfhWhieqpic4hNsOcUm7UzOjYRxqIrnQwN6M7h3H8Ig7fVG0JESOYg7:0E1dic4hNXc5UKjYr+wN6M718dfI0fQ

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • cd7cf45e1f43a8d7cb02b7382f7bfde0
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellLink.dll
    .dll windows:4 windows x86 arch:x86

    ac2c09e68d5518a91b4912bdf6a67d1b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    238a16a49edf3ab59e2f8c89449c9af7


    Headers

    Imports

    Exports

    Sections

  • $TEMP/SetACL.exe
    .exe windows:5 windows x86 arch:x86

    4107c274be99512943dedb53314a3190


    Headers

    Imports

    Sections

  • 01.jpg
    .jpg
  • MD_File.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Maps/ (1).map
  • Maps/ (2).map
  • Maps/ (3).map
  • Maps/ (4).map
  • Maps/ (5).map
  • Maps/ (6).map
  • Maps/ (7).map
  • Maps/ (8 PK).map
  • Maps/ (9).map
  • Maps/.map
  • Poptang.exe
    .exe windows:4 windows x86 arch:x86

    6fccf8c72a3cdc63446e3bbdfe97f410


    Headers

    Imports

    Sections

  • date.pak
  • dxUI.dll
    .dll windows:4 windows x86 arch:x86

    f58422e3035196f87814116d36ebec7a


    Headers

    Imports

    Exports

    Sections

  • fmodex.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • װؿ.txt
  • ͼ༭.exe
    .exe windows:4 windows x86 arch:x86

    80afe31f4866f9dcff00954ddfa10b93


    Headers

    Imports

    Sections

  • .url