General

  • Target

    PowerChute Personal Edition.rar

  • Size

    8.6MB

  • MD5

    48e00a11d34c244ce49230fcc5d6596b

  • SHA1

    b5a269d7b118f58023127766f97def3ea2d40089

  • SHA256

    7ae164803b7a8aa8ff939e5052514c2324ac0b05e12d6c2ef3dfbfc4cb5a4fd4

  • SHA512

    906b8bb82b341dd7470c206f4ea5722cfa59c2c427d3066a8c71a0889c17f87f74ebdf133d71da31f6362fdde090818af428ee0ec5d0a0ca8f868a0320189018

  • SSDEEP

    196608:k0v/Bzae89nIOlePz+q+/EHU3p3wun8iRr8ryNbyt6KzlBz:ksy9Nluz+qU289n8iRS9gG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • PowerChute Personal Edition.rar
    .rar
  • PowerChute Personal Edition/APC PCPE.chm
    .chm
  • PowerChute Personal Edition/APCUpdates.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/AllowStandby.reg
  • PowerChute Personal Edition/ApcUps.inf
  • PowerChute Personal Edition/DataCollectionLauncher.exe
    .exe windows:6 windows x86 arch:x86

    0a9274bc02dfdcb78c07de3f2cf93874


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/Display.exe
    .exe windows:6 windows x86 arch:x86

    05630343ccd5091753581b67e8a9b36c


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/EnergyLog.mdb
  • PowerChute Personal Edition/EnergyUsageManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/ExecuteProcess.exe
    .exe windows:6 windows x86 arch:x86

    aac19708fcf4fd36137b7fa70bea4c17


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/Microsoft.VC80.CRT.manifest
  • PowerChute Personal Edition/MsgDll.dll
    .dll windows:6 windows x86 arch:x86

    a22b4018ed9df4adb82a28a8a314dd4f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/NTUtil64.exe
    .exe windows:4 windows x64 arch:x64

    edd33e04e1af7d0b9dd538f81ae66d3c


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/PCPELog.txt
  • PowerChute Personal Edition/PCPELogger.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/PerformanceMonitor.dll
    .dll windows:6 windows x86 arch:x86

    aea80fd1f826f7d17867dcd358c0a30f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/PowerChute.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/PowerChute.exe.manifest
  • PowerChute Personal Edition/ProductIcon.ico
  • PowerChute Personal Edition/UIControl.dll
    .dll windows:6 windows x86 arch:x86

    94b018a1634ae6c5a4178c3dce087d51


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/UpsControl.dll
    .dll windows:6 windows x86 arch:x86

    6e5cd6b1245bf6e52c5c4c04272f6f9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/UpsDevice.dll
    .dll windows:6 windows x86 arch:x86

    80453e4948f2d3d4d4be6630d1198516


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/ValidateUPS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/WebserverRequest.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/apc_pcp1.cat
  • PowerChute Personal Edition/apcrun.exe
    .exe windows:6 windows x86 arch:x86

    9cc2840cc8c3378fbedb5f6bbc412d4b


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/apcsystray.exe
    .exe windows:6 windows x86 arch:x86

    b339aa4930ca2443a2f9260167a06578


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/dataserv.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/dlgbmp-for-china.bmp
  • PowerChute Personal Edition/drvutil.dll
    .dll windows:6 windows x86 arch:x86

    952205da3a9a5f3b41240ae8ecb2b3ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/ehib.exe
    .exe windows:5 windows x86 arch:x86

    d069b9a5a0a76e9c23d36570000c9f4d


    Headers

    Imports

    Sections

  • PowerChute Personal Edition/eventlog.dat
  • PowerChute Personal Edition/license.rtf
    .rtf
  • PowerChute Personal Edition/mainserv.exe
    .exe windows:6 windows x86 arch:x86

    552d60fc833df62f97de35d60a3ecceb


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/msvcm80.dll
    .dll windows:4 windows x86 arch:x86

    407b9cffcc90643d707c2de8d3f33b5a


    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    9fb682fe34f5d965faf4cf424fa6c000


    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/ntutil.dll
    .dll windows:6 windows x86 arch:x86

    0155ff67a0e2024f67f13e8b1e79f48b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/pchuteres.dll
    .dll windows:6 windows x86 arch:x86

    047f46a0028e9ed9f50c553ebace98e5


    Headers

    Imports

    Sections

  • PowerChute Personal Edition/pdcdll.dll
    .dll windows:6 windows x86 arch:x86

    5c90cb9a558e6783ec60fc5751fceb77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/potdata.exe
    .exe windows:6 windows x86 arch:x86

    cb4eb1463493387bdc25dc4c1e5d7a6d


    Code Sign

    Headers

    Imports

    Sections

  • PowerChute Personal Edition/rdp.dll
    .dll windows:6 windows x86 arch:x86

    a1e64d4be6f616f0e4d2c39fb4e6bd70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PowerChute Personal Edition/relnotes.txt
  • PowerChute Personal Edition/res.dll
    .dll windows:6 windows x86 arch:x86

    047f46a0028e9ed9f50c553ebace98e5


    Headers

    Imports

    Sections

  • PowerChute Personal Edition/ru/PowerChute.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PowerChute Personal Edition/uninstall.exe
    .exe windows:4 windows x86 arch:x86

    3abe302b6d9a1256e6a915429af4ffd2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LockedList.dll
    .dll windows:6 windows x86 arch:x86

    1f24eeb49cd5ab55727208afd8ac7b2f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections