General

  • Target

    sai-rus-pack-1.1.0-f1.exe

  • Size

    1.7MB

  • MD5

    6d47c2d48383c758d083afabcaeb62e5

  • SHA1

    bbf722a44095dc4c3bada8b32f3d1c9a63e0f72a

  • SHA256

    ddb45b2b89f9d644a72824053ac168aff345b82b58c3ea0b6f28ae6810ce9733

  • SHA512

    83cf7daa8187c76a57505cbde3e434698bbbc5e95b159813ba9430e3d6c1b5cd1f8f606fa0ccdc11b6c735692d316240e66d1bd2fb77447d951436cc642a5d1d

  • SSDEEP

    49152:LdVpTcxPcFjnyo/xSStG6kMI9A5vUAGyFf:Xppjnyo5bMBR9A5sAhF

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • sai-rus-pack-1.1.0-f1.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • blotmap/Fuzystatic.bmp
  • blotmap/Noise.bmp
  • blotmap/Spread.bmp
  • brushtex/Canvas.bmp
  • brushtex/Paper.bmp
  • do-it-yourself/TODO.txt
  • do-it-yourself/elemap-empty.psd
  • elemap/Bristle.bmp
  • elemap/Fine_Flat.bmp
  • elemap/Fine_Hollow.bmp
  • elemap/Fine_Pointy.bmp
  • elemap/Fine_Round_1.bmp
  • elemap/Fine_Round_2.bmp
  • elemap/Middle_Flat.bmp
  • elemap/Middle_Round.bmp
  • elemap/Rough_Flat.bmp
  • elemap/Rough_Round_1.bmp
  • elemap/Rough_Round_2.bmp
  • elemap/Rough_Vertical.bmp
  • elemap/Stringy_L.bmp
  • elemap/Stringy_M.bmp
  • elemap/Stringy_R.bmp
  • elemap/Stringy_S.bmp
  • elemap/Uneven_SR.bmp
  • elemap/xShape_Arrow.bmp
  • elemap/xShape_Cross.bmp
  • elemap/xShape_Cross_diss.bmp
  • elemap/xShape_HalfRound.bmp
  • history.txt
  • language.conf
  • misc.ini
  • papertex/Canvas.bmp
  • papertex/Paper.bmp
  • papertex/Watercolor A.bmp
  • papertex/Watercolor B.bmp
  • presetcvsize.conf
  • sai.exe
    .exe windows:4 windows x86 arch:x86

    b7006ec13967c8724f3605f407b925d0


    Headers

    Imports

    Sections

  • sfl.dll
    .dll windows:4 windows x86 arch:x86

    f81036e0afc91d8c06e09ae165d3b9d3


    Headers

    Imports

    Exports

    Sections

  • start-sai.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • toolink/00.ini
  • toolink/01.ini
  • toolink/02.ini
  • toolink/03.ini
  • toolink/04.ini
  • toolink/05.ini
  • toolink/06.ini
  • toolink/07.ini
  • toolink/08.ini
  • toolink/09.ini
  • toolnrm/00.ini
  • toolnrm/01.ini
  • toolnrm/02.ini
  • toolnrm/03.ini
  • toolnrm/04.ini
  • toolnrm/05.ini
  • toolnrm/06.ini
  • toolnrm/07.ini
  • toolnrm/08.ini
  • toolnrm/09.ini
  • toolnrm/10.ini
  • toolnrm/12.ini
  • toolnrm/13.ini
  • toolnrm/14.ini
  • toolnrm/16.ini
  • toolnrm/17.ini
  • toolnrm/18.ini
  • toolnrm/19.ini
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections