General

  • Target

    arc_unpacker-0.11-bin.zip

  • Size

    2.7MB

  • MD5

    d7131abd8d8bb1ea631cd78caad82963

  • SHA1

    205976dc99290084bcd3efeb95bb3f0784fe2476

  • SHA256

    c55bdd25a8f4e0f9aa58e2f2c806faf179514f4b929c43016dbf606d16ba2bc7

  • SHA512

    6ec5869ac8af1204e0aa2a041c0a77b04b25cfe33fb376c57aa5f283722c8c3bc15107ea4dce1b91f1b1ae3035425b601cc7e80002e76dbc1b0b04248ca7c267

  • SSDEEP

    49152:Yoy9PSkDe9laEdzVLIunGL9oM8xuQtmkhpyClwG93GYQiQ/Ez6PD0FAPDokN:QPSOe9c6LIuk9j8UQtmknyClz92YQhEm

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • arc_unpacker-0.11-bin.zip
    .zip
  • arc_unpacker.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • etc/noraneko.lst
  • etc/shiina_rio/flag.png
    .png
  • etc/shiina_rio/logo1.png
    .png
  • etc/shiina_rio/logo2.jpg
    .jpg
  • etc/shiina_rio/logo3.jpg
    .jpg
  • etc/shiina_rio/logo4.jpg
    .jpg
  • etc/shiina_rio/logo5.jpg
    .jpg
  • etc/shiina_rio/logo6.jpg
    .jpg
  • etc/shiina_rio/region.png
    .png
  • etc/shiina_rio/table1.bin
  • etc/shiina_rio/table2.bin
  • etc/shiina_rio/table3.bin
  • etc/shiina_rio/table4.bin
  • etc/th135-file-names.lst
  • etc/th145-file-names.lst
  • etc/tsujidou-junai.lst
  • etc/tsujidou-virgin.lst
  • etc/xp3/karakara.dat