General

  • Target

    f5caabd401969c2f2aed07b59d8cfa851d84950f63a7d8f7ed97be59e98d33bf

  • Size

    687KB

  • MD5

    3425978b728200f9c4e1e994a4085585

  • SHA1

    878898c92e9d5d52eb80e406a0a5b72cac08b4d1

  • SHA256

    f5caabd401969c2f2aed07b59d8cfa851d84950f63a7d8f7ed97be59e98d33bf

  • SHA512

    a71743d268ec625ac4ebd272c83746917928af413ad75d15ffc61ac12c5e33e0f5d6c116c081ff460766502106c89ce9cf66455233004e13b696c96741552df8

  • SSDEEP

    12288:W+7O0VZUxWvQ3kHK4ZbbCI+bNmmTTgeCK4OjoUIC4fMaS6WZoq6Xd3wKQCIAx35s:j7XVZUxWvQ3kq4Bb6doK5jTIYaDWiq6m

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f5caabd401969c2f2aed07b59d8cfa851d84950f63a7d8f7ed97be59e98d33bf
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/GMSkin_Image_2012_v1.zip