General

  • Target

    666.exe source code.zip

  • Size

    15.0MB

  • MD5

    f6139c8ef1e6afb1120bd6504885ba13

  • SHA1

    4c12bc4c892069e8d34790df3d148c323a02cc86

  • SHA256

    42c4a2b60b11dbcce3c5c72bc430311e15ca2b5a2e0408ba8ab2dfe00043f820

  • SHA512

    60d62192e2339659e565d60c4356b03370b7eae1acec6e2a55d74627c52d2ff05d5ce18c211741bf6e343b588170e13206f12ae29710db59e24ec9367a08cd0d

  • SSDEEP

    393216:CuHHOOiziZq7dVzK5wzdSh34XhHjmOQ4Z:CybufJz83EhlQw

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 666.exe source code.zip
    .zip

    Password: 123

  • 666 1st playload 2/creepy.bmp
  • 666 1st playload 2/exitwindll.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    d3c8404b42eb0e75ae1cdeacbf5efdba


    Headers

    Imports

    Exports

    Sections

  • 666 1st playload 2/first.compiled
    .xml
  • 666 1st playload 2/first.ctpr
    .xml
  • 666 1st playload 2/first.ctps
    .xml
  • 666 1st playload 2/first.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    5252ccbce59fdb67b5189856e13b5c19


    Headers

    Imports

    Sections

  • 666 1st playload 2/first.o
  • 666 1st playload 2/first.or
  • 666 1st playload 2/first.pas
    .js
  • 666 1st playload 2/first.res
  • 666 1st playload 2/libimpfirst.a
  • 666 setup 2/666.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    e6a87233a0a5daae6ec7cc9d6077b26e


    Headers

    Imports

    Sections

  • 666 setup 2/666.gif
    .gif
  • 666 setup 2/666.jpg
    .jpg

    Password: 123

  • 666 setup 2/creepy.bmp
  • 666 setup 2/death.compiled
    .xml
  • 666 setup 2/death.ctpr
    .xml
  • 666 setup 2/death.ctps
    .xml
  • 666 setup 2/death.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    3077bbcfc936aa9019dfe59e6b545849


    Headers

    Imports

    Sections

  • 666 setup 2/death.ico
  • 666 setup 2/death.o
  • 666 setup 2/death.or
  • 666 setup 2/death.ppr
    .js
  • 666 setup 2/death.res
  • 666 setup 2/first.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    5252ccbce59fdb67b5189856e13b5c19


    Headers

    Imports

    Sections

  • 666 setup 2/libimpdeath.a
  • 666/8223a9da17ad4b7164e11c963f60a876.png
    .png

    Password: 123

  • 666/R0f831fabfe906935884ba604c89e76ed.jfif
    .jpg

    Password: 123

  • 666/c.exe
    .exe windows:4 windows x86 arch:x86

    fde0cb49f0e3d3569a6795e5442f1a75


    Headers

    Imports

    Sections

  • 666/creepy.bmp
  • 666/death.exe
    .exe windows:4 windows x86 arch:x86

    912a7c819cbb62a2bd6dfc0ce789f39d


    Headers

    Imports

    Sections

  • 666/errordll.dll
    .dll windows:6 windows x86 arch:x86

    f206700332c55e323638d5b7b3ffdcc0


    Headers

    Imports

    Exports

    Sections

  • 666/l.ico
  • 666/lib/i386-win32/libimpunit1.a
  • 666/lib/i386-win32/project1.compiled
    .xml
  • 666/lib/i386-win32/project1.o
  • 666/lib/i386-win32/project1.or
  • 666/lib/i386-win32/project1.res
  • 666/lib/i386-win32/unit1.frm
  • 666/lib/i386-win32/unit1.o
  • 666/lib/i386-win32/unit1.ppu
  • 666/lol (2).exe
    .exe windows:4 windows x86 arch:x86

    84bf90b4f684aa546ce01cc41669a123


    Headers

    Imports

    Sections

  • 666/lol.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • 666/mbr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 666/p.exe
    .exe windows:4 windows x86 arch:x86

    d0538611b6c30e9393ed425a28c5d0cd


    Headers

    Imports

    Sections

  • 666/project1.ctpr
    .xml
  • 666/project1.ctps
    .xml
  • 666/project1.exe
    .exe windows:4 windows x86 arch:x86

    e6a87233a0a5daae6ec7cc9d6077b26e


    Headers

    Imports

    Sections

  • 666/project1.ico
  • 666/project1.ppr
  • 666/project1.res
  • 666/unit1.frm
  • 666/unit1.pas
  • readme.txt