Overview

overview

8

Static

static

7

Main.dll

windows7-x64

7

Main.dll

windows10-2004-x64

7

StartBE.exe

windows7-x64

8

StartBE.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a2a6ffea147124b0a3bce73d61cef315ad6c96321aeaf715e6d0a984d9a8a2f5

  • Size

    2.4MB

  • MD5

    fa6b2b8ea7f73661d2f8beeeca66280e

  • SHA1

    4d0bfb48d1de0a96b02d64cfae1f146dca32e0f1

  • SHA256

    a2a6ffea147124b0a3bce73d61cef315ad6c96321aeaf715e6d0a984d9a8a2f5

  • SHA512

    8c3fa4523f670c300c59acc8cacfc7fd362949d59679647fa007c43723de81149da08dcbb8c79171056ae9b6353fb317071b223eb6b0cc75918f35a3186372f5

  • SSDEEP

    49152:/aGNMvNOuqGKHHr70OFTfJQCesyhyAsdxgTYRuiNwQQ:gVELgOrQtsyNs/gkRMQQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a2a6ffea147124b0a3bce73d61cef315ad6c96321aeaf715e6d0a984d9a8a2f5
    .zip
  • Main.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • StartBE.exe
    .exe windows:6 windows x86 arch:x86

    4ac76c7ff85bc6ece33a227749383717


    Headers

    Imports

    Sections