General

  • Target

    671ab212adb2cbc06643b13f372fbe130e944151ff551ab07a75a34733bcfc6a

  • Size

    219KB

  • MD5

    dee33e0c7e2e056ab6376fa2d223bb8f

  • SHA1

    8808894716565a3220b631e9ff08ac3a3b8d4901

  • SHA256

    671ab212adb2cbc06643b13f372fbe130e944151ff551ab07a75a34733bcfc6a

  • SHA512

    85d153c6328a5c151be43c151787adb974aa21ba70303dbfcd65d95e5ebc2123ad9c3f11d314237f6c4d0169f76024a5caa4ac75adf8135818342351d7c442e3

  • SSDEEP

    6144:XKWDJk/cJvSkk3X30Q8QULnqK3omUIonle/JuRa8L9ByPlw:/JucRSkk3X30tBn6mUFnl3naC

Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 671ab212adb2cbc06643b13f372fbe130e944151ff551ab07a75a34733bcfc6a
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections