General

  • Target

    fbede2b7833532ceac86fd44359f738248ec1fcacfede42123a8afc12d95aacc

  • Size

    11.4MB

  • MD5

    6d701b839dc606c76f4b63077dc480b6

  • SHA1

    f462ddb206e4998e964c2baa6a354ef70ce95878

  • SHA256

    fbede2b7833532ceac86fd44359f738248ec1fcacfede42123a8afc12d95aacc

  • SHA512

    f1f15b040dda01c5547ed32e94a9eac7815311742172f4dac5588683bda46d99e0aecbbda02ab2ca419dd36603cd5523dedb5863c36c9ba95d9e86c0debf7748

  • SSDEEP

    196608:cwO6BfNeYMiIxopekT+O6irIRboSFXdNdHlr736JmCfd/b5OArSYT67U7lfrmoZ:fO6BfNeYJIxWu6iboSF7d136Jmu/b5xL

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • fbede2b7833532ceac86fd44359f738248ec1fcacfede42123a8afc12d95aacc
    .rar
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Storefile/体验服原商城.spd
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Storefile/正服商城.spd
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Storefile/点卷商城.spd
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Storefile/破天商城.spd
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Theversionofthegame/DirSvrInfo1.ini
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Theversionofthegame/Ver.ini
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/Theversionofthegame/WorldDef.ini
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/mgdm.dll
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • QQ飞车体验服全功能游戏工具0928请全部解压出来/superec.ProcessMemory.sys
    .exe windows x86

    790a705bb6e01a5ec06e60aeca34cb54


    Headers

    Imports

    Sections

  • QQ飞车体验服全功能游戏工具0928请全部解压出来/使用说明.txt
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/第一次使用请点击我.bat
  • QQ飞车体验服全功能游戏工具0928请全部解压出来/驱动版QQ飞车体验服全功能游戏工具0928.exe
    .exe windows x86

    0a78ada2f336ed1edc874beaf6bad5af


    Headers

    Imports

    Sections