General

  • Target

    d4d1fc5dc28fd4fa12c54b3e7c3d30f2

  • Size

    79KB

  • MD5

    d4d1fc5dc28fd4fa12c54b3e7c3d30f2

  • SHA1

    d6d3b744fb8a0297cfc5996182092ec840d3e19e

  • SHA256

    b2bd92702fe96c6b5eba92e7b96bc9a65c569b6a9d62383f58da31eb94ad6a7a

  • SHA512

    0492ab53938107a5c24a3ce72439abd0e49376048f8951d60472db033f069434dc5aa8e3866520450e11d2c9987ca311190759000833479c6acbf7da0bb9be4e

  • SSDEEP

    1536:IUxWpEVBi7sSmjn6M7a0SXvsA9aHhICEtUOW6RntNxKNnnbc9xND0ak95Z8LO9:IUQOriASmj6M7abXvshHhIC8bnENnbT1

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d4d1fc5dc28fd4fa12c54b3e7c3d30f2
    .zip
  • DownloaderActiveX.cab
    .cab
  • DownloaderActiveX.INF
  • DownloaderActiveX.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • index2.html
    .html .js polyglot