General

  • Target

    UltraISO.v9.5.3.2855.exe

  • Size

    1.7MB

  • MD5

    cd0b0c1599cd20d2264103d6e80f5551

  • SHA1

    7ad64105c6f708b4e74e151e7b852d0760d28e92

  • SHA256

    a9419d59356d38e735fb6163c0761671c0b0ce00e8194e90e89582b59cf4da27

  • SHA512

    ff0d65e524dcfd00e51efef8c9d625fb7a3644e342caf0900a375c1b60b808ea9f43d174b2b24e92d27e172694c016d8cb71ccc3e65822da1a1dd391ffd726d5

  • SSDEEP

    49152:eEN+wPGkqiKnr3OfldvgzrDByEoD3ynzx+ltM8mTJcs:e18XZKnSld4zrDvoD3yzx+lt0TJcs

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • UltraISO.v9.5.3.2855.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $COMMONFILES/EZB Systems/lame_enc.dll
    .dll windows:4 windows x86 arch:x86

    1e2f0d2e9e0a013be9fcbcfc8033ffa2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/UltraISO/UltraISO.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $EXEDIR/UltraISO/UltraISO.ini
  • $EXEDIR/UltraISO/drivers/ISODrive.sys
    .sys windows:5 windows x86 arch:x86

    92ceb94f309a340920bfdd2ca5a3b1c7


    Code Sign

    Headers

    Imports

    Sections

  • $EXEDIR/UltraISO/drivers/ISODrv64.sys
    .sys windows:5 windows x64 arch:x64

    ca96b7f2935e037ae9b674cc940efc40


    Code Sign

    Headers

    Imports

    Sections

  • $EXEDIR/UltraISO/drivers/IsoCmd.exe
    .exe windows:5 windows x86 arch:x86

    5d30fe8c13c8cfc987eeeaa6a0eddb98


    Code Sign

    Headers

    Imports

    Sections

  • $EXEDIR/UltraISO/isoshell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7c74863037feb824f5529aae329b8db8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/UltraISO/isoshl64.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    8a4b9e2113ee0eb869753bfe78c5c78c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/UltraISO/lang/lang_ru.dll
    .dll windows:4 windows x86 arch:x86

    a760606a533af4814ef9283c1ca3b322


    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/UltraISO/lang/lang_ua.dll
    .dll windows:4 windows x86 arch:x86

    a760606a533af4814ef9283c1ca3b322


    Headers

    Imports

    Exports

    Sections

  • $EXEDIR/UltraISO/uikey.ini
  • $PLUGINSDIR/Aero.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/installer.bmp
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/portable.bmp
  • UltraISO.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • UltraISO.ini
  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    32f3282581436269b3a75b6675fe3e08


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • drivers/ISODrive.sys
    .sys windows:5 windows x86 arch:x86

    92ceb94f309a340920bfdd2ca5a3b1c7


    Code Sign

    Headers

    Imports

    Sections

  • drivers/ISODrv64.sys
    .sys windows:5 windows x64 arch:x64

    ca96b7f2935e037ae9b674cc940efc40


    Code Sign

    Headers

    Imports

    Sections

  • drivers/IsoCmd.exe
    .exe windows:5 windows x86 arch:x86

    5d30fe8c13c8cfc987eeeaa6a0eddb98


    Code Sign

    Headers

    Imports

    Sections

  • isoshell.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7c74863037feb824f5529aae329b8db8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • isoshl64.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    8a4b9e2113ee0eb869753bfe78c5c78c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lang/lang_ru.dll
    .dll windows:4 windows x86 arch:x86

    a760606a533af4814ef9283c1ca3b322


    Headers

    Imports

    Exports

    Sections

  • lang/lang_ua.dll
    .dll windows:4 windows x86 arch:x86

    a760606a533af4814ef9283c1ca3b322


    Headers

    Imports

    Exports

    Sections

  • uikey.ini