General

  • Target

    pop.zip

  • Size

    14.6MB

  • MD5

    574f0142bfe8713304043100438d68fb

  • SHA1

    42d8a7c67fd7a1766eee75d8421687ca166fad8c

  • SHA256

    9ed06d6ac0d64232714b4f2f10473576434eab0cef915c441f5d34aa6ea9213b

  • SHA512

    cd8423bdc2a49516c1872e3b03371775cba77d68cf75ca33de044b8c835dad3f361c15615cf5ec56ac8a63de4dacad5b4446b7c53ac651d84ce2c5ff83f746bb

  • SSDEEP

    393216:U5CKnmodyV5rNaA6lgBW0K44w5ks/M9XsY:/Kmody7NdnBjN5ks/E

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • pop.zip
    .zip
  • app.exe
    .exe windows:5 windows x86 arch:x86

    0d15944c4846033d159a67a00b7ba20d


    Code Sign

    Headers

    Imports

    Sections

  • madbasic_.bpl
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    71ef3c08452290b9b380ced40a0015c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    8df8c3c6e47c73ef6aa19581542f5b9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vclx120.bpl
    .dll windows:5 windows x86 arch:x86

    7f2e89ebd535b27c805b9455db0d7172


    Code Sign

    Headers

    Imports

    Exports

    Sections