General

  • Target

    9eef6e2d4e5d2511a3fb86645bc5ae5d239a58da5b5650470a5deece1c731668

  • Size

    21.8MB

  • MD5

    5d4fc3e4c262645eeaeaed657ea4b716

  • SHA1

    82c640b6650e3496393a4e7fa195ea99544e81cf

  • SHA256

    9eef6e2d4e5d2511a3fb86645bc5ae5d239a58da5b5650470a5deece1c731668

  • SHA512

    a752a041213f64642debd8c64f5e0528bf813e1228993731a83d45a499dd7dd96e99361931ed8bd192001b5a9d2b305bd03fda3904f420a7b4fe9f97c25fe031

  • SSDEEP

    393216:7UYLXawoljZL0+KqXePRpVHAjGn3T5PXHqHLzt44QyK8GvFDRa:7FKwoljpePRpVx9PXqHPt44QD8QRa

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 4 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 9eef6e2d4e5d2511a3fb86645bc5ae5d239a58da5b5650470a5deece1c731668
    .rar
  • 傳奇守護者免费版1.8.9/detection/boss.dat
    .dll windows x86

    14c6151fe807348ec12efa6074cd8436


    Headers

    Imports

    Exports

    Sections

  • 傳奇守護者免费版1.8.9/detection/ly.dat
  • 傳奇守護者免费版1.8.9/detection/ly.exe
    .exe windows x86

    94a2e5086f629473958546a503d73283


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/passWs.dll
    .dll windows x86

    3949e13c5ab2f63d7778dd746589107d


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/passpk.exe
    .exe windows x86

    9cb24b53537e6eb2b9b58144e6c15fda


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/passty.dll
    .dll windows x86

    8a1d9775dd6609d8ea85188f147dd57d


    Headers

    Imports

    Exports

    Sections

  • 傳奇守護者免费版1.8.9/detection/tempj/InjDuck.dll
    .dll windows x86

    eb66f3b8c8e43aedb0261cdb6935dd82


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/tempj/jx.dat
  • 傳奇守護者免费版1.8.9/detection/tempj/jx.exe
    .exe windows x86

    9a82d44bd1f6a2b17371ac8c9055f6c8


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/tempj/yx.dat
  • 傳奇守護者免费版1.8.9/detection/tempj/yx.exe
    .exe windows x86

    94a2e5086f629473958546a503d73283


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/ty.dat
    .exe windows x86

    bf1481ed65fed5d9d77e9e96e54129ca


    Headers

    Imports

    Exports

    Sections

  • 傳奇守護者免费版1.8.9/detection/ty.exe
    .exe windows x86

    47a60c4c0e07941ae404cb0e6cccec51


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/detection/ws.dat
  • 傳奇守護者免费版1.8.9/detection/ws.exe
    .exe windows x86

    94a2e5086f629473958546a503d73283


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/updata/updata.zip
    .zip
  • 傳奇守護者免费版1.8.9/zip.dll
    .dll windows x86

    223080e5efcd152f98f298fd811d7f39


    Headers

    Imports

    Exports

    Sections

  • 傳奇守護者免费版1.8.9/传奇守护者官网:184pk.com.url
    .url
  • 傳奇守護者免费版1.8.9/传奇通用变速器4.0.exe
    .exe windows x86

    2ef4ff843ac2239f502e3d99f898fa67


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/使用说明.txt
  • 傳奇守護者免费版1.8.9/傲雪残影.exe
    .exe windows x86

    88281020d2648da223de50573d570034


    Code Sign

    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/傳奇守護者免费版1.8.9.exe
    .exe windows x86

    212bafba4a66a7b85478dd9cc6f2affb


    Headers

    Imports

    Sections

  • 傳奇守護者免费版1.8.9/在线咨询QQ:768339753.url
    .url
  • 傳奇守護者免费版1.8.9/编辑器使用说明.txt
  • 傳奇守護者免费版1.8.9/请关闭杀毒软件,方可正常运行辅助.txt