General

  • Target

    virus.rar

  • Size

    2.4MB

  • MD5

    6205febc3a0fc77551fc007c2dff3ff9

  • SHA1

    6e6677f8c64b214a5d5ea3318f8dce9d4f31c903

  • SHA256

    cc5b7862b712213b7b0c42e707a903aa0bb63c92fee4ee12b12b56baeceabd89

  • SHA512

    2d6ba01085d59221c60255051d830b20b41df526849ab89e4e866fe4b37657a074c9cbedd8fb9e5c95bbf2183687ceeb0f28d35b9475282a6fec46463639b1a2

  • SSDEEP

    49152:YFhunzSaDbh/omNP2GOmj/PG5ezePg7wJF9cUKwBB0Gx/VS:eU3Db/AcW5eI99ctwzS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • virus.rar
    .rar
  • virus/Administrator.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • virus/H7Ucs/rPcDo~m7/AK.TXT
  • virus/H7Ucs/rPcDo~m7/Lua51.dll
    .dll windows:6 windows x86 arch:x86

    3a6d420059802f11d6a8618c0671a808


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virus/H7Ucs/rPcDo~m7/adapt_for_imports.dll
    .dll windows:5 windows x86 arch:x86

    337670dc854d4bbbff6f7ed8ca42353b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virus/H7Ucs/rPcDo~m7/common.dll
    .dll windows:5 windows x86 arch:x86

    e9a8414b4c66192f35d21736ab1fa1f5


    Headers

    Imports

    Exports

    Sections

  • virus/H7Ucs/rPcDo~m7/msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6dbd7763e94344402d4206b7bab40e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virus/H7Ucs/rPcDo~m7/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    6a84b7445ccacd5d29ac27de2745f356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virus/H7Ucs/rPcDo~m7/wegame.exe
    .exe windows:5 windows x86 arch:x86

    ea7e251e74e8b82b229ec965a99aaf13


    Code Sign

    Headers

    Imports

    Sections

  • virus/dyxdgwfc/QQgames.exe
    .exe windows:6 windows x64 arch:x64

    5f74a5c747508e2822fdb9b687deaf42


    Headers

    Imports

    Exports

    Sections

  • virus/dyxdgwfc/UnityPlayer.dll