General

  • Target

    4c9e0764b3a2fadabad8ccd8c541fd97d78af8ba7e78a530a087ebc96673079a

  • Size

    536KB

  • MD5

    713789685a879fd2485a660901519b29

  • SHA1

    0a400dd7e5e31248c7135618840f0fcf87ebb444

  • SHA256

    4c9e0764b3a2fadabad8ccd8c541fd97d78af8ba7e78a530a087ebc96673079a

  • SHA512

    b13901caef93d5c29f247e4024c2a06ea73336bef495a0525ea845313333d75757db0e529c563ae5d8680b0df5548a58f759b013d279b86f11c9cc2f7aac770f

  • SSDEEP

    12288:ZhIzOgwOjGbSUq1u0w0LaPGBKE6QwJIZLUE7vreca1P:L/gPjEqCPwnEJYUE7vrTeP

Score
N/A

Malware Config

Signatures

Files

  • 4c9e0764b3a2fadabad8ccd8c541fd97d78af8ba7e78a530a087ebc96673079a
    .7z
  • ##PROFILE##/Cookies/index.dat
  • ##PROGRAM_FILES##/游戏繁简转化/IATHook.dll
    .dll windows x86

    340a38a39e1a5eb9016d37c15f3d5c0c


    Headers

    Imports

    Exports

    Sections

  • ##PROGRAM_FILES##/游戏繁简转化/SearchMatch.dll
    .dll windows x86

    459c049b1a781789f3d85764052f83ee


    Headers

    Imports

    Exports

    Sections

  • ##PROGRAM_FILES##/游戏繁简转化/W2kXpCJK.ini
  • ##PROGRAM_FILES##/游戏繁简转化/fjzh.exe
    .exe windows x86

    8c05fb0fdaf73cb2153f6b7486feef46


    Headers

    Imports

    Sections

  • ##PROGRAM_FILES##/游戏繁简转化/irunin.bmp
  • ##PROGRAM_FILES##/游戏繁简转化/irunin.dat
  • ##PROGRAM_FILES##/游戏繁简转化/irunin.ini
  • ##PROGRAM_FILES##/游戏繁简转化/irunin.lng
  • ##PROGRAM_FILES##/游戏繁简转化/msvcp60.dll
    .dll windows x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • ##PROGRAM_FILES##/游戏繁简转化/readme.txt
  • ##WINDOWS##/SchedLgU.Txt
  • ##WINDOWS##/SoftwareDistribution/DataStore/DataStore.edb
  • ##WINDOWS##/SoftwareDistribution/DataStore/Logs/edb.chk
  • ##WINDOWS##/SoftwareDistribution/DataStore/Logs/edb.log
  • ##WINDOWS##/WindowsUpdate.log
  • ##WINDOWS##/iun6002.exe
    .exe windows x86

    8f24986f4fa54f57a25447c22de02964


    Headers

    Imports

    Sections

  • ##WINDOWS##/system32/mshtmlte.dll
    .dll regsvr32 windows x86

    052bab7d7b679ef0636136cfe165eae1


    Headers

    Imports

    Exports

    Sections

  • RegFile
  • init.ini