General

  • Target

    eb2cda05ce2b380a32c2a89d7932e1d0N.exe

  • Size

    759KB

  • MD5

    eb2cda05ce2b380a32c2a89d7932e1d0

  • SHA1

    a9c0e5e54ffce4b5fd51b736baa3a45a2c736f86

  • SHA256

    93c8ec8696b360c21ea6e6a610c86da1e75580805d9bd1fcee7101bde1f590a2

  • SHA512

    4b7d558cae1230529e9945bdb69d40cf4d6149f5cfc9bf9290fa06ef2b95093e45e3c58478aa5fbc355aa2e7c4d55b44156b5069f72d14d45d9386e032804e30

  • SSDEEP

    12288:08AH/LuYITG5iCwjAdIh+zLrcTM++mgyPUOvzZbl7T926Cmd467G9QV6ZMh/t57V:08AH6YIi5gAdI0vEwml7T9Amd97Y46Z2

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • eb2cda05ce2b380a32c2a89d7932e1d0N.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsRandom.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $TEMP/$_90_/GMSkin_Image_2012_v1.zip
    .zip
  • skin.xml
  • skin/Thumbs.db
  • skin/icon1.png
    .png
  • skin/保存目录.png
    .png
  • skin/关闭.png
    .png
  • skin/协议背景.png
    .png
  • skin/卸载背景.png
    .png
  • skin/图片背景框.png
    .png
  • skin/多选.png
    .png
  • skin/安装.png
    .png
  • skin/安装01.png
    .png
  • skin/安装02.png
    .png
  • skin/安装03.png
    .png
  • skin/安装04.png
    .png
  • skin/安装05.png
    .png
  • skin/安装协议.png
    .png
  • skin/安装完成.png
    .png
  • skin/安装完成按钮.png
    .png
  • skin/完成.png
    .png
  • skin/广告关闭.png
    .png
  • skin/按钮.png
    .png
  • skin/最小化.png
    .png
  • skin/最小化2.png
    .png
  • skin/格子.png
    .png
  • skin/欢迎.png
    .png
  • skin/浏览.png
    .png
  • skin/游戏弹出.png
    .png
  • skin/软件弹出.png
    .png
  • skin/进度条.png
    .png
  • skin/进度条背景.png
    .png
  • skin/选项.png
    .png
  • skin/默认背景.png
    .png
  • $TEMP/$_90_/MyNsisExtend.dll
    .dll windows:4 windows x86 arch:x86

    9cb11d0d4bed69c64ae8d0549b4ce4ce


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_90_/MyNsisSkin.dll
    .dll windows:4 windows x86 arch:x86

    8b2c18b411d31cbef33f61e5be07509a


    Headers

    Imports

    Exports

    Sections

  • $TEMP/$_90_/unconfig.dat