General

  • Target
    f5684bd7650410f5a6f80d9885f68521cdf814124979bfc5a39b5b30a7010188N
  • Size 447KB
  • Sample241108-bb663stqhr
  • SHA256 f5684bd7650410f5a6f80d9885f68521cdf814124979bfc5a39b5b30a7010188
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 6 IoCs

File Explorer

  • f5684bd7650410f5a6f80d9885f68521cdf814124979bfc5a39b5b30a7010188N
    .exe 447KB
  • $PLUGINSDIR/BaseConvert.dll
    .dll 48KB
  • $PLUGINSDIR/ButtonEvent.dll
    .dll 4KB
  • $PLUGINSDIR/Dialer.dll
    .dll 3KB
  • $PLUGINSDIR/GetVersion.dll
    .dll 9KB
  • $PLUGINSDIR/KillProcDLL.dll
    .dll 4KB
  • $PLUGINSDIR/Linker.dll
    .dll 9KB
  • $PLUGINSDIR/Math.dll
    .dll 66KB
  • $PLUGINSDIR/SimpleInstaller.exe
    .exe 66KB
  • $_2_/Uninstall.exe
    .exe 49KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ThreadTimer.dll
    .dll 3KB
  • $PLUGINSDIR/Timeout.dll
    .dll 16KB
  • $PLUGINSDIR/blowfish.dll
    .dll 26KB
  • $PLUGINSDIR/ef.exe
    .exe 2KB
  • $PLUGINSDIR/icons/data_1.dat
    .zip 303KB
  • 1.ico
    1KB
  • 10.ico
    .png 722B
  • 100.ico
    1KB
  • 10000.ico
    1KB
  • 10001.ico
    894B
  • 10002.ico
    1KB
  • 10003.ico
    1KB
  • 10004.ico
    894B
  • 10005.ico
    1KB
  • 10006.ico
    1KB
  • 10007.ico
    1KB
  • 10008.ico
    1KB
  • 10009.ico
    1KB
  • 10010.ico
    1KB
  • 10011.ico
    1KB
  • 10012.ico
    894B
  • 10013.ico
    1KB
  • 10014.ico
    1KB
  • 10015.ico
    1KB
  • 10016.ico
    1KB
  • 10017.ico
    1KB
  • 10018.ico
    1KB
  • 10019.ico
    1KB
  • 10020.ico
    1KB
  • 10021.ico
    1KB
  • 10022.ico
    1KB
  • 10023.ico
    1KB
  • 10024.ico
    1KB
  • 10025.ico
    7KB
  • 10026.ico
    1KB
  • 10027.ico
    1KB
  • 10028.ico
    1KB
  • 10029.ico
    5KB
  • 10030.ico
    1KB
  • 10031.ico
    1KB
  • 10032.ico
    1KB
  • 10033.ico
    1KB
  • 10034.ico
    318B
  • 10035.ico
    1KB
  • 10036.ico
    1KB
  • 10037.ico
    1KB
  • 10038.ico
    1KB
  • 10039.ico
    318B
  • 10040.ico
    894B
  • 10041.ico
    1KB
  • 10042.ico
    1KB
  • 10043.ico
    518B
  • 10044.ico
    318B
  • 10045.ico
    894B
  • 10046.ico
    1KB
  • 10047.ico
    1KB
  • 10048.ico
    1KB
  • 10049.ico
    1KB
  • 10050.ico
    894B
  • 10051.ico
    1KB
  • 10052.ico
    894B
  • 10053.ico
    894B
  • 10054.ico
    894B
  • 10055.ico
    894B
  • 10056.ico
    1KB
  • 10057.ico
    766B
  • 10058.ico
    1KB
  • 10059.ico
    1KB
  • 101.ico
    1KB
  • 102.ico
    24KB
  • 103.ico
    .png 745B
  • 104.ico
    .gif 82B
  • 107.ico
    .png 762B
  • 108.ico
    9KB
  • 11.ico
    .png 608B
  • 110.ico
    .png 495B
  • 111.ico
    7KB
  • 112.ico
    1KB
  • 119.ico
    29KB
  • 12.ico
    894B
  • 120.ico
    29KB
  • 121.ico
    29KB
  • 122.ico
    29KB
  • 123.ico
    29KB
  • 125.ico
    1KB
  • 13.ico
    3KB
  • 14.ico
    .png 762B
  • 15.ico
    1KB
  • 16.ico
    1KB
  • 17.ico
    1KB
  • 18.ico
    894B
  • 19.ico
    1KB
  • 2.ico
    1KB
  • 20.ico
    24KB
  • 21.ico
    3KB
  • 22.ico
    1KB
  • 23.ico
    1KB
  • 24.ico
    1KB
  • 25.ico
    1KB
  • 26.ico
    1KB
  • 29.ico
    24KB
  • 3.ico
    1KB
  • 30.ico
    5KB
  • 31.ico
    3KB
  • 33.ico
    .png 762B
  • 34.ico
    1KB
  • 36.ico
    .png 762B
  • 37.ico
    .png 762B
  • 38.ico
    1KB
  • 39.ico
    894B
  • 4.ico
    1KB
  • 40.ico
    1KB
  • 41.ico
    1KB
  • 42.ico
    1KB
  • 43.ico
    .png 762B
  • 44.ico
    1KB
  • 45.ico
    .png 762B
  • 46.ico
    1KB
  • 47.ico
    1KB
  • 48.ico
    1KB
  • 5.ico
    1KB
  • 52.ico
    .png 765B
  • 53.ico
    894B
  • 54.ico
    1KB
  • 55.ico
    1KB
  • 57.ico
    5KB
  • 59.ico
    4KB
  • 6.ico
    1KB
  • 61.ico
    24KB
  • 62.ico
    .png 762B
  • 63.ico
    .png 762B
  • 64.ico
    894B
  • 65.ico
    1KB
  • 66.ico
    1KB
  • 68.ico
    1KB
  • 69.ico
    1KB
  • 72.ico
    894B
  • 73.ico
    894B
  • 75.ico
    24KB
  • 76.ico
    24KB
  • 77.ico
    5KB
  • 78.ico
    4KB
  • 79.ico
    1KB
  • 8.ico
    .gif 872B
  • 80.ico
    39KB
  • 81.ico
    39KB
  • 82.ico
    1KB
  • 85.ico
    21KB
  • 86.ico
    21KB
  • 87.ico
    1KB
  • 88.ico
    .png 432B
  • 89.ico
    894B
  • 90.ico
    1KB
  • 91.ico
    1KB
  • 92.ico
    17KB
  • 93.ico
    17KB
  • 94.ico
    1KB
  • 95.ico
    5KB
  • 97.ico
    .png 1KB
  • 98.ico
    1KB
  • $PLUGINSDIR/icons/default.ico
    894B
  • $PLUGINSDIR/icons/no_toolbar.ico
    1KB
  • $PLUGINSDIR/inetc.dll
    .dll 8KB
  • $PLUGINSDIR/inetc.dll.out0
    9KB
  • $PLUGINSDIR/inetc.dll.out1
    9KB
  • $PLUGINSDIR/main.ico
    99KB
  • $PLUGINSDIR/mf.exe
    .exe 2KB
  • $PLUGINSDIR/modern-wizard.bmp
    51KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsRichEdit.dll
    .dll 5KB
  • out.upx
    .dll 7KB
  • $PLUGINSDIR/nsWeb.dll
    .dll 47KB
  • $PLUGINSDIR/nsisunz.dll
    .dll 40KB

f5684bd7650410f5a6f80d9885f68521cdf814124979bfc5a39b5b30a7010188N

  • IMPHASH 7fa974366048f9c551ef45714595665e
  • SHA256 f5684bd7650410f5a6f80d9885f68521cdf814124979bfc5a39b5b30a7010188
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
b6:4d:28:71:b5:cd:15:97:3e:76:03:68:08:43:26:28:c2:d9:91:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Linkular LLC,O=Linkular LLC,L=Redondo Beach,ST=California,C=US
Chains

Nov 5, 2024

Minor OS version
0
Major OS version
4
Entry point
12491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths