Overview

overview

8

Static

static

8

FastVerCode.dll

windows7-x64

8

FastVerCode.dll

windows10-2004-x64

3

ICSharpCod...ib.dll

windows7-x64

1

ICSharpCod...ib.dll

windows10-2004-x64

1

Interop.ADODB.dll

windows7-x64

1

Interop.ADODB.dll

windows10-2004-x64

1

Interop.ADOX.dll

windows7-x64

1

Interop.ADOX.dll

windows10-2004-x64

1

Interop.ADQX.dll

windows7-x64

8

Interop.ADQX.dll

windows10-2004-x64

8

Interop.ADQX64.dll

windows7-x64

1

Interop.ADQX64.dll

windows10-2004-x64

1

Interop.JPO.dll

windows7-x64

1

Interop.JPO.dll

windows10-2004-x64

1

Interop.JRO.dll

windows7-x64

1

Interop.JRO.dll

windows10-2004-x64

1

UUWiseHelper.dll

windows7-x64

1

UUWiseHelper.dll

windows10-2004-x64

3

dl.dll

windows7-x64

1

dl.dll

windows10-2004-x64

1

irisskin2.dll

windows7-x64

1

irisskin2.dll

windows10-2004-x64

1

qq_post.exe

windows7-x64

8

qq_post.exe

windows10-2004-x64

8

qq_post1.4...de.dll

windows7-x64

8

qq_post1.4...de.dll

windows10-2004-x64

3

qq_post1.4...ib.dll

windows7-x64

1

qq_post1.4...ib.dll

windows10-2004-x64

1

qq_post1.4...DB.dll

windows7-x64

1

qq_post1.4...DB.dll

windows10-2004-x64

1

qq_post1.4...OX.dll

windows7-x64

1

qq_post1.4...OX.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c307877b29bfa741b365fa9a05373160ad5bf98608de2a847a4b8231174d1de

  • Size

    7.3MB

  • MD5

    c4783d1f7c68d86b10c4df39d0c0ac00

  • SHA1

    48d1d59bab611e9cd768829aba6d41ec5d0b8df1

  • SHA256

    1c307877b29bfa741b365fa9a05373160ad5bf98608de2a847a4b8231174d1de

  • SHA512

    00b972eb8c53cf7e9c4b4b1795b685d136cf1bfd59691ad88a5578145d73bcbf4a24119c3588e7bd2ae51f759142129b0077f1439a8a075016c2510f2c770b8b

  • SSDEEP

    196608:S3vJtiTHzCllvJtiTHHOq1R3vJtiTHzUqlQ3RRp:AteHzGteHH9teHzYp

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Files

  • 1c307877b29bfa741b365fa9a05373160ad5bf98608de2a847a4b8231174d1de
    .zip
  • FastVerCode.dll
    .dll windows x86

    27e7e1e624350fc9412adeceda4f8d53


    Headers

    Imports

    Exports

    Sections

  • ICSharpCode.SharpZipLib.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.ADODB.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.ADOX.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Interop.ADQX.dll
    .dll windows x86

    217705e1e02e6d3b6c634d6849100e28


    Headers

    Imports

    Exports

    Sections

  • Interop.ADQX64.dll
    .dll windows x64

    68f10cbba5fb9bf38383210562853137


    Headers

    Imports

    Exports

    Sections

  • Interop.JPO.dll
    .dll windows x86

    b8a6eae64d86678cb66465e7a223e2b8


    Headers

    Imports

    Exports

    Sections

  • Interop.JRO.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • LZConfig.ini
  • UUWiseHelper.dll
    .dll windows x86

    9894069603e9ee2c6b8236a442edd823


    Headers

    Imports

    Exports

    Sections

  • config.ini
  • data/account.mdb
  • data/backup/20131101/account.mdb
  • data/backup/20140503/account.mdb
  • data/textBox3.txt
  • data_qq/qq253484631.txt
  • dl.dll
  • img/logo128.ico
  • irisskin2.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • luyou/ALCATEL SpeedTouch511e.ini
  • luyou/ALPHA A8.ini
  • luyou/ALPHA AFW-GR55 mini.ini
  • luyou/ALPHA K3.ini
  • luyou/ALPHA V4.ini
  • luyou/ALPHA VCE.ini
  • luyou/ASUS RX3041X.ini
  • luyou/ASUS WL530g 2.ini
  • luyou/ASUS WL530g.ini
  • luyou/AboveCable ACRT2010-11.ini
  • luyou/Alpha GR50.ini
  • luyou/Aolynk BR104.ini
  • luyou/Boc R460.ini
  • luyou/D-Link DI-504.ini
  • luyou/D-Link DI-524.ini
  • luyou/D-Link DI-524M.ini
  • luyou/D-Link DI-604+.ini
  • luyou/D-Link DI-604.ini
  • luyou/D-Link DI-614+.ini
  • luyou/D-Link DI-624+A.ini
  • luyou/D-Link DI-624.ini
  • luyou/D-Link DI-808HV.ini
  • luyou/D-Link DIR-100.ini
  • luyou/D-Link DIR-300.ini
  • luyou/D-Link DIR-600.ini
  • luyou/D-Link DIR-615 A1 1.10.ini
  • luyou/D-Link DIR-615.ini
  • luyou/FAST FR40.ini
  • luyou/FAST FR402.ini
  • luyou/HL-RT700.ini
  • luyou/Hi-Spider Hotel_V3.ini
  • luyou/HuaWei 3COM BR104.ini
  • luyou/HuaWei 3COM BR204+.ini
  • luyou/HuaWei HG520.ini
  • luyou/HuaWei WBR204G+.ini
  • luyou/HuaWei WBR204G.ini
  • luyou/IP-Com 11N.ini
  • luyou/IP-Com Soho 2.ini
  • luyou/IP-Com Soho 3.ini
  • luyou/IP-Com Soho.ini
  • luyou/IPTime G100R.ini
  • luyou/IPTime N300R.ini
  • luyou/KINGNET 3.1.ini
  • luyou/KINGNET 3.2.ini
  • luyou/KINGNET KN-S1060.ini
  • luyou/KINGNET KN-S10602.ini
  • luyou/KINGNET KN-S1060T.ini
  • luyou/KINGNET KN-WR710H.ini
  • luyou/LINKSYS WRT54G.ini
  • luyou/LINKSYS WRT54GC.ini
  • luyou/LinkSYS 2.00.20.ini
  • luyou/LinkSYS BEFSR41.ini
  • luyou/LinkSYS BEFW11S4.ini
  • luyou/LinkSYS WRK54G(2).ini
  • luyou/LinkSYS WRK54G.ini
  • luyou/Mercury MW54R.ini
  • luyou/Mercury Soho MR804(2).ini
  • luyou/Mercury Soho MR804.ini
  • luyou/Motorola G.ini
  • luyou/NetCore 2105+NR.ini
  • luyou/NetCore 2305NR.ini
  • luyou/NetCore 2505+NR.ini
  • luyou/NetCore 2805NR.ini
  • luyou/NetCore 54M2.ini
  • luyou/NetCore 605GR.ini
  • luyou/NetCore NR+205.ini
  • luyou/NetShare R-1200.ini
  • luyou/NetShare R-1800.ini
  • luyou/NetShare V1.005.ini
  • luyou/Netgear WGR614.ini
  • luyou/SMC SMC7004VBR.ini
  • luyou/TP-Link 402M.ini
  • luyou/TP-Link R4148.ini
  • luyou/TP-Link TD-8810.ini
  • luyou/TP-Link TD-8820.ini
  • luyou/TP-Link TL-R402M.ini
  • luyou/TP-Link TL-R410.ini
  • luyou/TP-Link TL-R460.ini
  • luyou/TP-Link TL-R860 860M.ini
  • luyou/TP-Link TL-R860+.ini
  • luyou/TP-Link TL-WR340G V5.ini
  • luyou/TP-Link TL-WR340G.ini
  • luyou/TP-Link TL-WR641G 642G.ini
  • luyou/TP-Link TL-WR941N TL-WR942N.ini
  • luyou/Tenda NAT Router.ini
  • luyou/Tenda R01-029.ini
  • luyou/Tenda Soho(2).ini
  • luyou/Tenda Soho.ini
  • luyou/Tenda TEI402.ini
  • luyou/Tenda TEI402M.ini
  • luyou/Tenda TEI480T+.ini
  • luyou/Tenda TEI6606.ini
  • luyou/Tenda TEI6608.ini
  • luyou/Tenda TEI6608S 2.ini
  • luyou/Tenda TEI6608S.ini
  • luyou/Tenda TEI6611S.ini
  • luyou/Tenda W311R.ini
  • luyou/Tenda W541R.ini
  • luyou/UCOM URS-983(2).ini
  • luyou/UCOM URS-983.ini
  • luyou/Vigor 2901.ini
  • luyou/Wealnet R-2804P.ini
  • luyou/Wealnet R-2808M.ini
  • qq_post.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • qq_post1.4/FastVerCode.dll
    .dll windows x86

    27e7e1e624350fc9412adeceda4f8d53


    Headers

    Imports

    Exports

    Sections

  • qq_post1.4/ICSharpCode.SharpZipLib.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • qq_post1.4/Interop.ADODB.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • qq_post1.4/Interop.ADOX.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • qq_post1.4/Interop.ADQX.dll
    .dll windows x86

    217705e1e02e6d3b6c634d6849100e28


    Headers

    Imports

    Exports

    Sections

  • qq_post1.4/Interop.ADQX64.dll
    .dll windows x64

    68f10cbba5fb9bf38383210562853137


    Headers

    Imports

    Exports

    Sections

  • qq_post1.4/Interop.JPO.dll
    .dll windows x86

    b8a6eae64d86678cb66465e7a223e2b8


    Headers

    Imports

    Exports

    Sections

  • qq_post1.4/Interop.JRO.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • qq_post1.4/LZConfig.ini
  • qq_post1.4/UUWiseHelper.dll
    .dll windows x86

    9894069603e9ee2c6b8236a442edd823


    Headers

    Imports

    Exports

    Sections

  • qq_post1.4/data/account.mdb
  • qq_post1.4/data/backup/20140503/account.mdb
  • qq_post1.4/dl.dll
  • qq_post1.4/img/logo128.ico
  • qq_post1.4/irisskin2.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • qq_post1.4/luyou/ALCATEL SpeedTouch511e.ini
  • qq_post1.4/luyou/ALPHA A8.ini
  • qq_post1.4/luyou/ALPHA AFW-GR55 mini.ini
  • qq_post1.4/luyou/ALPHA K3.ini
  • qq_post1.4/luyou/ALPHA V4.ini
  • qq_post1.4/luyou/ALPHA VCE.ini
  • qq_post1.4/luyou/ASUS RX3041X.ini
  • qq_post1.4/luyou/ASUS WL530g 2.ini
  • qq_post1.4/luyou/ASUS WL530g.ini
  • qq_post1.4/luyou/AboveCable ACRT2010-11.ini
  • qq_post1.4/luyou/Alpha GR50.ini
  • qq_post1.4/luyou/Aolynk BR104.ini
  • qq_post1.4/luyou/Boc R460.ini
  • qq_post1.4/luyou/D-Link DI-504.ini
  • qq_post1.4/luyou/D-Link DI-524.ini
  • qq_post1.4/luyou/D-Link DI-524M.ini
  • qq_post1.4/luyou/D-Link DI-604+.ini
  • qq_post1.4/luyou/D-Link DI-604.ini
  • qq_post1.4/luyou/D-Link DI-614+.ini
  • qq_post1.4/luyou/D-Link DI-624+A.ini
  • qq_post1.4/luyou/D-Link DI-624.ini
  • qq_post1.4/luyou/D-Link DI-808HV.ini
  • qq_post1.4/luyou/D-Link DIR-100.ini
  • qq_post1.4/luyou/D-Link DIR-300.ini
  • qq_post1.4/luyou/D-Link DIR-600.ini
  • qq_post1.4/luyou/D-Link DIR-615 A1 1.10.ini
  • qq_post1.4/luyou/D-Link DIR-615.ini
  • qq_post1.4/luyou/FAST FR40.ini
  • qq_post1.4/luyou/FAST FR402.ini
  • qq_post1.4/luyou/HL-RT700.ini
  • qq_post1.4/luyou/Hi-Spider Hotel_V3.ini
  • qq_post1.4/luyou/HuaWei 3COM BR104.ini
  • qq_post1.4/luyou/HuaWei 3COM BR204+.ini
  • qq_post1.4/luyou/HuaWei HG520.ini
  • qq_post1.4/luyou/HuaWei WBR204G+.ini
  • qq_post1.4/luyou/HuaWei WBR204G.ini
  • qq_post1.4/luyou/IP-Com 11N.ini
  • qq_post1.4/luyou/IP-Com Soho 2.ini
  • qq_post1.4/luyou/IP-Com Soho 3.ini
  • qq_post1.4/luyou/IP-Com Soho.ini
  • qq_post1.4/luyou/IPTime G100R.ini
  • qq_post1.4/luyou/IPTime N300R.ini
  • qq_post1.4/luyou/KINGNET 3.1.ini
  • qq_post1.4/luyou/KINGNET 3.2.ini
  • qq_post1.4/luyou/KINGNET KN-S1060.ini
  • qq_post1.4/luyou/KINGNET KN-S10602.ini
  • qq_post1.4/luyou/KINGNET KN-S1060T.ini
  • qq_post1.4/luyou/KINGNET KN-WR710H.ini
  • qq_post1.4/luyou/LINKSYS WRT54G.ini
  • qq_post1.4/luyou/LINKSYS WRT54GC.ini
  • qq_post1.4/luyou/LinkSYS 2.00.20.ini
  • qq_post1.4/luyou/LinkSYS BEFSR41.ini
  • qq_post1.4/luyou/LinkSYS BEFW11S4.ini
  • qq_post1.4/luyou/LinkSYS WRK54G(2).ini
  • qq_post1.4/luyou/LinkSYS WRK54G.ini
  • qq_post1.4/luyou/Mercury MW54R.ini
  • qq_post1.4/luyou/Mercury Soho MR804(2).ini
  • qq_post1.4/luyou/Mercury Soho MR804.ini
  • qq_post1.4/luyou/Motorola G.ini
  • qq_post1.4/luyou/NetCore 2105+NR.ini
  • qq_post1.4/luyou/NetCore 2305NR.ini
  • qq_post1.4/luyou/NetCore 2505+NR.ini
  • qq_post1.4/luyou/NetCore 2805NR.ini
  • qq_post1.4/luyou/NetCore 54M2.ini
  • qq_post1.4/luyou/NetCore 605GR.ini
  • qq_post1.4/luyou/NetCore NR+205.ini
  • qq_post1.4/luyou/NetShare R-1200.ini
  • qq_post1.4/luyou/NetShare R-1800.ini
  • qq_post1.4/luyou/NetShare V1.005.ini
  • qq_post1.4/luyou/Netgear WGR614.ini
  • qq_post1.4/luyou/SMC SMC7004VBR.ini
  • qq_post1.4/luyou/TP-Link 402M.ini
  • qq_post1.4/luyou/TP-Link R4148.ini
  • qq_post1.4/luyou/TP-Link TD-8810.ini
  • qq_post1.4/luyou/TP-Link TD-8820.ini
  • qq_post1.4/luyou/TP-Link TL-R402M.ini
  • qq_post1.4/luyou/TP-Link TL-R410.ini
  • qq_post1.4/luyou/TP-Link TL-R460.ini
  • qq_post1.4/luyou/TP-Link TL-R860 860M.ini
  • qq_post1.4/luyou/TP-Link TL-R860+.ini
  • qq_post1.4/luyou/TP-Link TL-WR340G V5.ini
  • qq_post1.4/luyou/TP-Link TL-WR340G.ini
  • qq_post1.4/luyou/TP-Link TL-WR641G 642G.ini
  • qq_post1.4/luyou/TP-Link TL-WR941N TL-WR942N.ini
  • qq_post1.4/luyou/Tenda NAT Router.ini
  • qq_post1.4/luyou/Tenda R01-029.ini
  • qq_post1.4/luyou/Tenda Soho(2).ini
  • qq_post1.4/luyou/Tenda Soho.ini
  • qq_post1.4/luyou/Tenda TEI402.ini
  • qq_post1.4/luyou/Tenda TEI402M.ini
  • qq_post1.4/luyou/Tenda TEI480T+.ini
  • qq_post1.4/luyou/Tenda TEI6606.ini
  • qq_post1.4/luyou/Tenda TEI6608.ini
  • qq_post1.4/luyou/Tenda TEI6608S 2.ini
  • qq_post1.4/luyou/Tenda TEI6608S.ini
  • qq_post1.4/luyou/Tenda TEI6611S.ini
  • qq_post1.4/luyou/Tenda W311R.ini
  • qq_post1.4/luyou/Tenda W541R.ini
  • qq_post1.4/luyou/UCOM URS-983(2).ini
  • qq_post1.4/luyou/UCOM URS-983.ini
  • qq_post1.4/luyou/Vigor 2901.ini
  • qq_post1.4/luyou/Wealnet R-2804P.ini
  • qq_post1.4/luyou/Wealnet R-2808M.ini
  • qq_post1.4/qq_post.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • qq_post1.4/setting.ini
  • qq_post1.4/skin.ssk
  • qq_post1.4/QQȺӪ.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • qq_post1.4/QQȺӪ1.4.zip
    .zip
  • qq_post1.4/˵.txt
  • setting.ini
  • setup.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • skin.ssk
  • 下载说明.htm
    .html .js
  • QQȺӪ1.4.exe
    .exe windows x86

    0212b6cb1564d3d4a9941cd6d6f259fd


    Headers

    Imports

    Sections

  • ˵.txt