General

  • Target

    S1.rar

  • Size

    454KB

  • MD5

    4469e3aaa4b2fe382d8f3791dddaaee1

  • SHA1

    610323dc1b7b687e5f94e3f58a07f2be642bb9a1

  • SHA256

    7668f22367cd750784861350071410bf34c3555b5b8db808f7b84dd857ad694d

  • SHA512

    44c547bc9405724cceb8400588b6b59eb1fcfb4e9ab5e0ec510a952db900ab7fcc635987ae477bcc73bcad86d2e0ee30c7267eb3976d59faf9bc64f8f9a00d54

  • SSDEEP

    12288:d9f+8qN4bNTqfhPSCQaTStDoVM0FmDG4pDGw:dx+8dZTkPS+St104vp9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • S1.rar
    .rar
  • S1/AOMEI.exe
    .exe windows:4 windows x86 arch:x86

    a4704a88d528d450f37e088e3382542c


    Code Sign

    Headers

    Imports

    Sections

  • S1/Comn.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • S1/awnhlp.log
  • S1/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Headers

    Imports

    Exports

    Sections

  • S1/vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    b06d4116da69a513992d529f84731e6f


    Code Sign

    Headers

    Imports

    Exports

    Sections