Overview

overview

7

Static

static

7

dos.exe

windows7-x64

7

dos.exe

windows10-2004-x64

7

libeay32.dll

windows7-x64

7

libeay32.dll

windows10-2004-x64

7

ngdqsz.dll

windows7-x64

5

ngdqsz.dll

windows10-2004-x64

5

ssleay32.dll

windows7-x64

7

ssleay32.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce674faf0f24911fe8122911b5b06255.bin

  • Size

    12.8MB

  • MD5

    ce674faf0f24911fe8122911b5b06255

  • SHA1

    871182cd743a9bf4efe1770ccf8d78ee935f1bba

  • SHA256

    fb6f5a25053b0e603747551fb644c8feac3223b122a821dba56641ee28d33cb3

  • SHA512

    06fa100e53a0a18e9ed09628bcec8b0a6eb4869970be22a713c7c6716194d00a302ed99f591cf914a84e380bac4263a3784b2b64e8d3ed831d52f6bced680e38

  • SSDEEP

    196608:KBXTthvMUy/thz2Z8qFCQQw7c4R/5FRijvetrpEUzZBvqHRAawsMbnys2qbZ5rlS:MXPkUQiZ8+ww7c0RpskZkHyFbnMQwYQb

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • ce674faf0f24911fe8122911b5b06255.bin
    .zip

    Password: infected

  • dos.ahk
  • dos.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    c07a5e2247b48b561b9ee6a9e632f518


    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ngdqsz.xv
    .dll windows:6 windows x86 arch:x86

    Password: infected

    e2af3f189526289f48da3e08f1282975


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections