General

  • Target

    6e617978e5afea1f972d6b709dede5c752beab8f5a0c08f49a700b3d38e45c34

  • Size

    5.2MB

  • MD5

    a00eb1b5f4e9a9087f70c482070d0203

  • SHA1

    6ceebbecb546a49b19abbedb06c584cf5e611f39

  • SHA256

    6e617978e5afea1f972d6b709dede5c752beab8f5a0c08f49a700b3d38e45c34

  • SHA512

    6763736a2c15c39aae1108b2a4cc494ddadeeb7f8f7d4339cfc021100ca086ee6df3c3cc1aef185c6f736a13dd81bb723d627dd442eb6c440003f03ac6683374

  • SSDEEP

    98304:RWpCXJs82Bbf0Mc0eEEOE9qPwouV3cKleYT+ORre2aVsfaG86fbftTZ+g7ah:X2l8BEELMYVF0Orjqsf+iVPc

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 6e617978e5afea1f972d6b709dede5c752beab8f5a0c08f49a700b3d38e45c34
    .rar
  • qsxwfz/七杀歪瓜辅助/IPHlpApi.lib
  • qsxwfz/七杀歪瓜辅助/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • qsxwfz/七杀歪瓜辅助/config.ini
  • qsxwfz/七杀歪瓜辅助/internet.fne
    .dll windows x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Sections

  • qsxwfz/七杀歪瓜辅助/krnln.fnr
    .dll windows x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Sections

  • qsxwfz/七杀歪瓜辅助/wmp.dll
    .dll regsvr32 windows x86

    7644aac249fd191d4c4847f92b0180de


    Headers

    Imports

    Exports

    Sections

  • qsxwfz/七杀歪瓜辅助/七杀小歪辅助V3.1.5.exe
    .exe windows x86

    df8d140b9f6bb571b18b9a676d139a11


    Headers

    Imports

    Sections

  • qsxwfz/七杀歪瓜辅助/引怪.txt
  • 新云软件.url
    .url
  • 易搜软件园.url
    .url