General

  • Target

    24941e18163ecc6051ec21da8419f070N.exe

  • Size

    2.6MB

  • MD5

    24941e18163ecc6051ec21da8419f070

  • SHA1

    31103a4f842631e85278018ac79776b2cf856357

  • SHA256

    7d8e5f5df56e40e23804c18fe456bfb875693fd861f6a8baab8fe2fb067a893f

  • SHA512

    baac31b82d38e485e359d9ed299fb3c9ebde250d04b7d5a4bedf231217d21b28178c657f690586e12667c6d0d5e6b88998e5a095e4a7bbd25548ce9ce81406d7

  • SSDEEP

    49152:Ubw4UwXIof6S3i8Mq/qb49lO5S/Ys0wNexLOhoN7cEWoUMYjI/ctG:iFXYoSaiQ/qklOnfWe1WodWprs/ctG

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 24941e18163ecc6051ec21da8419f070N.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/locate.dll
    .dll windows:4 windows x86 arch:x86

    7f8181c74f882a780c7cd485241e8b51


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/Thumbs.db
  • skin/icon1.png
    .png
  • skin/保存目录.png
    .png
  • skin/关闭.png
    .png
  • skin/协议背景.png
    .png
  • skin/卸载背景.png
    .png
  • skin/图片背景框.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装协议.png
    .png
  • skin/安装完成.png
    .png
  • skin/安装完成按钮.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/最小化2.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_89_/MyNsisSkin.dll
    .dll windows:4 windows x86 arch:x86

    8b2c18b411d31cbef33f61e5be07509a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_89_/config.dat
  • $TEMP/$_89_/game.jpg
    .jpg
  • AIM.dll
    .dll windows:4 windows x86 arch:x86

    c7b33690a995f2e1943bb5bfbf2a646c


    Headers

    Imports

    Exports

    Sections

  • Aviplay.bin
    .exe windows:4 windows x86 arch:x86

    ba98171ad6f6d7bf3faea6a0e9acd842


    Headers

    Imports

    Sections

  • Aviplay2.bin
    .exe windows:4 windows x86 arch:x86

    ba98171ad6f6d7bf3faea6a0e9acd842


    Headers

    Imports

    Sections

  • Binkplay.bin
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ExeConfig.ini
  • Intro.bik
  • MFC42D.DLL
    .dll windows:4 windows x86 arch:x86

    eb13cd632639f15bb8225fd67e59e4c5


    Headers

    Imports

    Sections

  • MSVCP60.dll
    .dll windows:4 windows x86 arch:x86

    a7a98f9c2f55921feb823b6f7e5ce74f


    Headers

    Imports

    Exports

    Sections

  • MSVCP60D.DLL
    .dll windows:4 windows x86 arch:x86

    21dddfd5fe74f22f16363fbf0df78894


    Headers

    Imports

    Exports

    Sections

  • MSVCRTD.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • archiver.dll
    .dll windows:4 windows x86 arch:x86

    47b3370d6e701543be7415c0510e4edf


    Headers

    Imports

    Exports

    Sections

  • ddraw_Dll.dll
    .dll windows:4 windows x86 arch:x86

    1823face3079e490fdc61712ec00d3c2


    Headers

    Imports

    Exports

    Sections

  • dll.dll
    .dll windows:4 windows x86 arch:x86

    0bd0bb13e7f76e67be585b7df13432c4


    Headers

    Imports

    Exports

    Sections

  • drvmgt.dll
    .dll windows:4 windows x86 arch:x86

    1905b559da5f8c299b90ec1e37f78696


    Headers

    Imports

    Exports

    Sections

  • game.ico
  • gl.cfg
  • ijl11.dll
    .dll windows:4 windows x86 arch:x86

    eb6df2cdc437fbaf0d983ed099e6f072


    Headers

    Imports

    Exports

    Sections

  • mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • mss32.dll
    .dll windows:4 windows x86 arch:x86

    ad5847e250ce0c0fbecb8f1a6e2e7f65


    Headers

    Imports

    Exports

    Sections