General

  • Target

    694910eb637fefdd4de59af9e5b95bfaa099a0580c7a68ae51dda0755a8e0127.exe

  • Size

    6.3MB

  • MD5

    cd50939929236da465555dbd449cee6b

  • SHA1

    01011369ca4479d148cba567cf113cd0653f3910

  • SHA256

    694910eb637fefdd4de59af9e5b95bfaa099a0580c7a68ae51dda0755a8e0127

  • SHA512

    27f17f7a195746207ee63f07d17018d59493529c2f13c7859008d783ac9fb21156778cb615159a68cec92b330964439f054487b2ec94b5dfac649e97687fbecb

  • SSDEEP

    196608:WVlRrhn+CUsRevPE1Aoc+zowyQTjw/nMSvzcj:WVns3vPEebBwyQ3wUHj

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 694910eb637fefdd4de59af9e5b95bfaa099a0580c7a68ae51dda0755a8e0127.exe
    .exe windows:5 windows x86 arch:x86

    234fc10c364a84945638d1fdaa32191b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • Config.dll
    .dll windows:5 windows x86 arch:x86

    5d46feea76c41d51260221b5fcb37e9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Guid.dll
    .dll windows:5 windows x86 arch:x86

    0b9137dc5c54e4bd417b3ae2dca6720a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
  • Microsoft.VC90.CRT/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Report.dll
    .dll windows:5 windows x86 arch:x86

    da7ddf80ec178ba151a86e0ccd364a2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup.exe
    .exe windows:5 windows x86 arch:x86

    4c2b4e2cc795128efa174c09554493de


    Code Sign

    Headers

    Imports

    Sections

  • Setup/Config.dll
    .dll windows:5 windows x86 arch:x86

    5d46feea76c41d51260221b5fcb37e9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Guid.dll
    .dll windows:5 windows x86 arch:x86

    0b9137dc5c54e4bd417b3ae2dca6720a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
  • Setup/Microsoft.VC90.CRT/msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Microsoft.VC90.CRT/msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Microsoft.VC90.CRT/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Report.dll
    .dll windows:5 windows x86 arch:x86

    da7ddf80ec178ba151a86e0ccd364a2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/SetupFrame.dll
    .dll windows:5 windows x86 arch:x86

    1d8b704896febe77db8efac28b2fe7ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Support.dll
    .dll windows:5 windows x86 arch:x86

    2c38762804eca0c8f103dc48b6c3c8a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/Utility.dll
    .dll windows:5 windows x86 arch:x86

    58f519e7fd21a7b44f168ed4ec80c095


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/XBus.dll
    .dll windows:5 windows x86 arch:x86

    49f5177fd4ddd42cece5e361fbf1143d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/XSkin.dll
    .dll windows:5 windows x86 arch:x86

    89c0584d6fe2bcd6a3da030bb7a1d3ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SetupFrame.dll
    .dll windows:5 windows x86 arch:x86

    1d8b704896febe77db8efac28b2fe7ea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Skin/Setup/Lang.xf
  • Skin/Setup/Skin.xf
  • Source/Decode.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Source/MPC.dat
    .7z
  • BrowserPlugIn.dll
    .dll windows:5 windows x86 arch:x86

    b5543433eee9cb0454afceebb2e30012


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cleaner.dll
    .dll windows:5 windows x86 arch:x86

    202a9a3551cd8375ce1f33187b453ec7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Config/Clean.xf
  • Config/DB/as.db
  • Config/DB/st.db
  • Config/PlugIn.xf
  • Config/google.xml
  • CrashReport.exe
    .exe windows:5 windows x86 arch:x86

    76f17ad498aab6e086b8a597e6fe770e


    Code Sign

    Headers

    Imports

    Sections

  • DataCenter.dll
    .dll windows:5 windows x86 arch:x86

    e36ec1d18a55e7fb2b75e89a8d32b5f0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Database.dll
    .dll windows:5 windows x86 arch:x86

    2110e72adcb1128bc456edb4d6d108ec


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Drivers/MPCBase_32.sys
    .sys windows:6 windows x86 arch:x86

    8c195c7b2b03f332dfe077472d671177


    Code Sign

    Headers

    Imports

    Sections

  • Drivers/MPCKpt.inf
  • Drivers/MPCKpt_vista_32.sys
    .sys windows:6 windows x86 arch:x86

    3ece994dc710e139c4c10d3fdea40650


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Drivers/MPCKpt_vista_64.sys
    .sys windows:6 windows x64 arch:x64

    db9ef507e3263e8bb569a101d62cc64c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Drivers/MPCKpt_xp_32.sys
    .sys windows:6 windows x86 arch:x86

    259cec8a465727b79ea02bb912ca5915


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FloatFrame.dll
    .dll windows:5 windows x86 arch:x86

    a41fa534019242a6a0931742394addef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Image/SearchIcon/search_{08DA4B46-E0EB-4B4D-8C8B-558C967AF6C5}.ico
  • Image/SearchIcon/search_{22A8D5A3-F368-4C6B-BF4D-3C901EBCF242}.ico
  • Image/SearchIcon/search_{3F9A707D-2C36-4344-8621-B8E4ADC95C18}.ico
  • Image/SearchIcon/search_{D8EC46AF-529F-4636-963B-C086429C73DA}.ico
  • Image/SearchIcon/search_{DE37CD8C-DE7B-481F-A676-303ABAFBEE04}.ico
  • Image/SearchIcon/search_{F154C596-75A9-4028-90E8-9752BD7CA05B}.ico
  • Image/SearchIcon/toasts_waring.png
    .png
  • Image/SgIcon/block.png
    .png
  • Image/SgIcon/home.png
    .png
  • Image/SgIcon/ie.png
    .png
  • Image/SgIcon/search.png
    .png
  • Image/SoIcon/AR_green.png
    .png
  • Image/SoIcon/AR_org.png
    .png
  • Image/SoIcon/AR_red.png
    .png
  • Image/SoIcon/Bp_green.png
    .png
  • Image/SoIcon/Bp_org.png
    .png
  • Image/SoIcon/Bp_red.png
    .png
  • Image/SoIcon/SVC_green.png
    .png
  • Image/SoIcon/SVC_org.png
    .png
  • Image/SoIcon/SVC_red.png
    .png
  • Image/SoIcon/SpeedUp_green.png
    .png
  • Image/SoIcon/SpeedUp_org.png
    .png
  • Image/SoIcon/SpeedUp_red.png
    .png
  • Image/SoIcon/TSK_green.png
    .png
  • Image/SoIcon/TSK_org.png
    .png
  • Image/SoIcon/TSK_red.png
    .png
  • Image/g1.png
    .png
  • Image/g10.png
    .png
  • Image/g11.png
    .png
  • Image/g12.png
    .png
  • Image/g2.png
    .png
  • Image/g3.png
    .png
  • Image/g4.png
    .png
  • Image/g5.png
    .png
  • Image/g6.png
    .png
  • Image/g7.png
    .png
  • Image/g8.png
    .png
  • Image/g9.png
    .png
  • Image/q1.png
    .png
  • Image/q10.png
    .png
  • Image/q11.png
    .png
  • Image/q12.png
    .png
  • Image/q2.png
    .png
  • Image/q3.png
    .png
  • Image/q4.png
    .png
  • Image/q5.png
    .png
  • Image/q6.png
    .png
  • Image/q7.png
    .png
  • Image/q8.png
    .png
  • Image/q9.png
    .png
  • Image/r1.png
    .png
  • Image/r10.png
    .png
  • Image/r11.png
    .png
  • Image/r12.png
    .png
  • Image/r2.png
    .png
  • Image/r3.png
    .png
  • Image/r4.png
    .png
  • Image/r5.png
    .png
  • Image/r6.png
    .png
  • Image/r7.png
    .png
  • Image/r8.png
    .png
  • Image/r9.png
    .png
  • Image/y1.png
    .png
  • Image/y10.png
    .png
  • Image/y11.png
    .png
  • Image/y12.png
    .png
  • Image/y2.png
    .png
  • Image/y3.png
    .png
  • Image/y4.png
    .png
  • Image/y5.png
    .png
  • Image/y6.png
    .png
  • Image/y7.png
    .png
  • Image/y8.png
    .png
  • Image/y9.png
    .png
  • LogReport.dll
    .dll windows:5 windows x86 arch:x86

    873c43a1cdf0bb55867094c787a7aaa2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LpcManager.dll
    .dll windows:5 windows x86 arch:x86

    23e2834527e4e7785498e41c129afba7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MPC.exe
    .exe windows:5 windows x86 arch:x86

    010d02ebddcfcca9dfba7bff2677cdd5


    Code Sign

    Headers

    Imports

    Sections

  • MPCAnalysisPdb.exe
    .exe windows:5 windows x86 arch:x86

    05740ffda1df38ccb255b8805f0c90f1


    Code Sign

    Headers

    Imports

    Sections

  • MPCAutoClean.exe
    .exe windows:5 windows x86 arch:x86

    0abd22217f288204e0781cfb87d2a1ba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MPCCheckDump.exe
    .exe windows:5 windows x86 arch:x86

    977e3de32818b6d532294513b20b5094


    Code Sign

    Headers

    Imports

    Sections

  • MPCProtectService.exe
    .exe windows:5 windows x86 arch:x86

    0672431c1357af41e6fca56b353b8134


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MPCSecurity.exe
    .exe windows:5 windows x86 arch:x86

    a769d9cb6244ee71fc6c419bb3e118e1


    Code Sign

    Headers

    Imports

    Sections

  • MPCSetting.exe
    .exe windows:5 windows x86 arch:x86

    e079225462db6b2b592d5add34be78b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MPCSmartBalance.exe
    .exe windows:5 windows x86 arch:x86

    88bc5e74ce5cbd47e99958e6d0e30ce5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MPCTray.exe
    .exe windows:5 windows x86 arch:x86

    d6386241c7f732edb840e8619190a8a8


    Code Sign

    Headers

    Imports

    Sections

  • MPCTray64.exe
    .exe windows:5 windows x64 arch:x64

    b477f114f09e498cd47be03893117d04


    Code Sign

    Headers

    Imports

    Sections

  • MainFrame.dll
    .dll windows:5 windows x86 arch:x86

    01eeeae430a5c1f1ba19a04a0062efda


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Monitor.dll
    .dll windows:5 windows x86 arch:x86

    83a8d60cd03c99d22c2901c930bf9a27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MpcLog.ini
  • MpcSafeDll.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    320d28e550d500c5f78c4e9b973f62f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MpcSafeDll64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    314c4d53d33ee70faa9bcd4333b51500


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeNavi.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4537114b5fbd05f8c4fa885ae8ae48f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeNavi64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    1411afa04676ebe8e2c5e1daf5ac486f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SafeProtect.dll
    .dll windows:5 windows x86 arch:x86

    c6cf9d9da45baadc107f65c816fb6956


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Skin/Cleaner/Lang.xf
  • Skin/Cleaner/Skin.xf
  • Skin/CrashReport/Lang.xf
  • Skin/CrashReport/Skin.xf
  • Skin/FloatWnd/Lang.xf
  • Skin/FloatWnd/Skin.xf
  • Skin/Tray/Lang.xf
  • Skin/Tray/Skin.xf
  • Skin/Uninstall/Lang.xf
  • Skin/Uninstall/Skin.xf
  • SmartBalance.dll
    .dll windows:5 windows x86 arch:x86

    de133b1482d0950272e2f45b5ef0b5aa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TrayFrame.dll
    .dll windows:5 windows x86 arch:x86

    a60b5eb7879060e283fb8cad7d2e5f2a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UninstDelete.exe
    .exe windows:5 windows x86 arch:x86

    31d5ccbf01b8c1b69f021b5fb86e11a8


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:5 windows x86 arch:x86

    2e3e599068702ff9aa415b54251b35a0


    Code Sign

    Headers

    Imports

    Sections

  • UninstallFrame.dll
    .dll windows:5 windows x86 arch:x86

    2bc628ed783ec0c85c1b4440b6a246ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Update.dll
    .dll windows:5 windows x86 arch:x86

    6ca4b4d75fd21181708807667bd80c4d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • UpdateHost.exe
    .exe windows:5 windows x86 arch:x86

    c3c529ebdff817719251222c1d532b66


    Code Sign

    Headers

    Imports

    Sections

  • Upgrade.dll
    .dll windows:5 windows x86 arch:x86

    19ea6916a17ab7cd3bc77995e56e07a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Web.dll
    .dll windows:5 windows x86 arch:x86

    75436d4a78fab52604dd7b7ce76b3dcc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • WinService.dll
    .dll windows:5 windows x86 arch:x86

    27e3302c75466961bd85dac620e903c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XProcessBus.dll
    .dll windows:5 windows x86 arch:x86

    3de5b323562169363161f23f218fb39a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dbgkpt.dll
    .dll windows:6 windows x86 arch:x86

    e246e1939eedffac25310343ba57d266


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snh.dll
  • symsrv.dll
    .dll windows:6 windows x86 arch:x86

    05396c94571584d93abf7470283817c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wfhxte.dat
  • Support.dll
    .dll windows:5 windows x86 arch:x86

    2c38762804eca0c8f103dc48b6c3c8a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Utility.dll
    .dll windows:5 windows x86 arch:x86

    58f519e7fd21a7b44f168ed4ec80c095


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XBus.dll
    .dll windows:5 windows x86 arch:x86

    49f5177fd4ddd42cece5e361fbf1143d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • XSkin.dll
    .dll windows:5 windows x86 arch:x86

    89c0584d6fe2bcd6a3da030bb7a1d3ef


    Code Sign

    Headers

    Imports

    Exports

    Sections