General

  • Target

    aa159c242c54988920ca64e521b5cb072e63b8970287c910a77efa403ae9155f

  • Size

    2.7MB

  • MD5

    0d548d6f0fed4303a54585fbb46e642b

  • SHA1

    b913e55cb53ade932859318ec342249bdcad65e6

  • SHA256

    aa159c242c54988920ca64e521b5cb072e63b8970287c910a77efa403ae9155f

  • SHA512

    5103532b1a2a16d4ab5231cefd3dafb4a9a3bb26f64e57c9df4b94cc8375343380d0bcb6a42f164dbf6269b59a2cc7551f96bcbe999dbec0261fd143fda80493

  • SSDEEP

    49152:CsY3d+BLqgW6/ntU3P+2RDkweQxNw/68z3gn4SUv02uIGQUP/Gu85PXPfeRkzRkY:CD3d+B1W3P+k4PQw/68z3g2uZQAL8JWm

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • aa159c242c54988920ca64e521b5cb072e63b8970287c910a77efa403ae9155f
    .rar
  • 安装前必看.txt
  • 旺旺群发E客服版/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • 旺旺群发E客服版/dxwl_bh.dll
    .dll windows x86

    02e88351c3784f615719503b75919424


    Headers

    Imports

    Exports

    Sections

  • 旺旺群发E客服版/handle.dll
    .dll windows x86

    f2da42d6509b62b38815c90d2e5c54ba


    Headers

    Imports

    Exports

    Sections

  • 旺旺群发E客服版/安装前必看.url
    .url
  • 旺旺群发E客服版/旺旺群发E客服版V1.0.exe
    .exe windows x86

    59f162c9f64d5e4be936294ca7a0afee


    Headers

    Imports

    Exports

    Sections

  • 旺旺群发E客服版/旺旺群发E客服版V1.0_Patch.exe
    .exe windows x86


    Headers

    Sections

  • 旺旺群发E客服版/群发帮助说明.doc
    .doc windows office2003
  • 最牛的单机游戏下载网站.url
    .url