General

  • Target

    04d1ffad25e9541cf1c0d2a054aba4b2cd2ca03c764cbf62bf8900cb92a38221

  • Size

    26.0MB

  • MD5

    b787375c18ed250e4c1df7e068ffa66a

  • SHA1

    a60810c5416d38597ab62eb6ff3a46926a299b19

  • SHA256

    04d1ffad25e9541cf1c0d2a054aba4b2cd2ca03c764cbf62bf8900cb92a38221

  • SHA512

    9d1b06b9afbe22a8d2ab4e51f46b075b7adf2e16c6bf0b0a470627bdbdd60dcc099648307110e23afb17d7caa832c0eec2616e306e0bf98bee48cb34270179de

  • SSDEEP

    786432:Ue3UtIfD/qKHQjzA1dHZhJuPutC2LU/GpEFZy7CkHg:UntIr/Twg1tTTLQFuC+g

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 04d1ffad25e9541cf1c0d2a054aba4b2cd2ca03c764cbf62bf8900cb92a38221
    .rar
  • TheWorldPortable/Application/6.2.0.128/Locales/en-us.pak
  • TheWorldPortable/Application/6.2.0.128/Locales/zh-cn.pak
  • TheWorldPortable/Application/6.2.0.128/chrome.dll
    .dll windows x86

    6e5c28d547ec6ccd369016933d4f74dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/chrome_100_percent.pak
    .js
  • TheWorldPortable/Application/6.2.0.128/chrome_child.dll
    .dll windows x86

    ba9b28b4e03d921ea18084a1dd999839


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/ffmpegsumo.dll
    .dll windows x86

    73a2dd64f04b133a53423c18b442f276


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/gcswf32.dll
    .dll regsvr32 windows x86

    a37b9d88b764d22279be2b0dec6eaedc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/icudt.dll
    .dll windows x86


    Code Sign

    Headers

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/ieswitcher
  • TheWorldPortable/Application/6.2.0.128/ieswitcher-journal
  • TheWorldPortable/Application/6.2.0.128/plugins/Bak/敬告.txt
  • TheWorldPortable/Application/6.2.0.128/plugins/np115upload.dll
    .dll windows x86

    c885ba32c6dbb2238e87640375b18052


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/np360upload.dll
    .dll regsvr32 windows x86

    4a303404b6fbc586646616a464199c7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/npAliSecCtrl.dll
    .dll regsvr32 windows x86


    Code Sign

    Headers

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/npUploader.dll
    .dll windows x86

    a9cdbbe084599f80ba2ac7dac910b903


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/npactivex.dll
    .dll regsvr32 windows x86

    bf33495dcd96ae5c34a0dd16ea4bce72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/npalidcp.dll
    .dll windows x86

    4cab4106a8e2d7d25af2597cab7a0a38


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/npaliedit.dll
    .dll regsvr32 windows x86


    Code Sign

    Headers

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/nptxftnWebKit.dll
    .dll windows x86

    f72619357f1f0c16b97042f9ee90041b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/plugins/npxunlei.dll
    .dll windows x86

    9290dca8117c7c3c34f238e585fb7a40


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/Application/6.2.0.128/resources.pak
    .js
  • TheWorldPortable/Application/TheWorld.exe
    .exe windows x86

    4b9d708940aa9fa37788f45ee815afe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • TheWorldPortable/TheWorld6-Set.exe
    .exe windows x86

    bbaee7abf2d1791bc23f1a6c6d164f09


    Headers

    Imports

    Sections

  • TheWorldPortable/User Data/Default/Preferences
  • TheWorldPortable/User Data/Default/User StyleSheets/Custom.css
  • TheWorldPortable/User Data/Default/Web Data
  • TheWorldPortable/User Data/Local State
  • TheWorldPortable/User Data/abpfiles/TheWorld6_AD_Rule_AutoUpdate.exe
    .exe windows x86

    41163620bc3651289c2f5b556c4b3011


    Headers

    Imports

    Sections

  • TheWorldPortable/User Data/abpfiles/TheWorld6_AD_Rule_AutoUpdate.ini
  • TheWorldPortable/User Data/abpfiles/kill.video.ad.txt
  • TheWorldPortable/User Data/abpfiles/winxp_win7设置、删除开机启动(请以管理员身份运行).bat
  • TheWorldPortable/User Data/abpfiles/xwhycadblock.txt
  • TheWorldPortable/当客软件园.url
    .url

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.