Overview

overview

8

Static

static

8

IEG/!)卸载.bat

windows7-x64

1

IEG/!)卸载.bat

windows10-2004-x64

1

IEG/!)绿化.bat

windows7-x64

1

IEG/!)绿化.bat

windows10-2004-x64

1

IEG/GdiPlus.dll

windows7-x64

3

IEG/GdiPlus.dll

windows10-2004-x64

3

IEG/HaokanBar.dll

windows7-x64

6

IEG/HaokanBar.dll

windows10-2004-x64

6

IEG/LiveUpdate.exe

windows7-x64

8

IEG/LiveUpdate.exe

windows10-2004-x64

8

IEG/SSubTmr6.dll

windows7-x64

1

IEG/SSubTmr6.dll

windows10-2004-x64

1

IEG/Vb6chs.dll

windows7-x64

1

IEG/Vb6chs.dll

windows10-2004-x64

1

IEG/fldrvw71.dll

windows7-x64

1

IEG/fldrvw71.dll

windows10-2004-x64

1

IEG/haokanbar2.dll

windows7-x64

6

IEG/haokanbar2.dll

windows10-2004-x64

6

IEG/iehelp.chm

windows7-x64

1

IEG/iehelp.chm

windows10-2004-x64

1

IEG/iepro.exe

windows7-x64

8

IEG/iepro.exe

windows10-2004-x64

8

IEG/shlobj71.dll

windows7-x64

1

IEG/shlobj71.dll

windows10-2004-x64

1

IEG/srck.exe

windows7-x64

6

IEG/srck.exe

windows10-2004-x64

6

IEG/sriecli.exe

windows7-x64

6

IEG/sriecli.exe

windows10-2004-x64

1

IEG/srieh.exe

windows7-x64

6

IEG/srieh.exe

windows10-2004-x64

1

IEG/vbalExpBar6.dll

windows7-x64

1

IEG/vbalExpBar6.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    73a3bdd577d915dead17e3c42811fc11541c6b0de894b88a5913b9e2b230013b

  • Size

    4.3MB

  • MD5

    30bb6066091bc092f75b95ab21dec562

  • SHA1

    32f0140180b0ddaeb067f9581925a1f724bc1017

  • SHA256

    73a3bdd577d915dead17e3c42811fc11541c6b0de894b88a5913b9e2b230013b

  • SHA512

    cf82d92aa090929beb73615a6e01443852696db93ab3b8e30571b61cf025965e87a6fee1d080f38f562f440ed7fa6398d603840e3ed19260f927736f80cd8e2b

  • SSDEEP

    98304:yJytwaESUqkL+bqRCvQPu3yGssxYkjGniDIV1K7BBAPdQz5bqbh6:9b4qkcqCvv3yLsKkan+I+7QmFbqbA

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 73a3bdd577d915dead17e3c42811fc11541c6b0de894b88a5913b9e2b230013b
    .rar
  • IEG/!)卸载.bat
  • IEG/!)绿化.bat
  • IEG/GdiPlus.dll
    .dll windows x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • IEG/HaokanBar.dll
    .dll regsvr32 windows x86

    a071bd0b92bf5709c303b02cd3164f17


    Headers

    Imports

    Exports

    Sections

  • IEG/License.txt
  • IEG/LiveUpdate.exe
    .exe windows x86


    Headers

    Sections

  • IEG/SSubTmr6.dll
    .dll regsvr32 windows x86

    eddcb3d633deafc33cd6cdf5d519f2e0


    Headers

    Imports

    Exports

    Sections

  • IEG/Unwise.ini
  • IEG/Vb6chs.dll
    .dll windows x86


    Headers

    Sections

  • IEG/WhiteSite.dat
  • IEG/close.gif
    .gif
  • IEG/fldrvw71.ocx
    .dll regsvr32 windows x86

    fa348d423e3784d355fd54087c8cd402


    Headers

    Imports

    Exports

    Sections

  • IEG/haokanbar2.dll
    .dll regsvr32 windows x86

    a071bd0b92bf5709c303b02cd3164f17


    Headers

    Imports

    Exports

    Sections

  • IEG/iehelp.chm
    .chm
  • IEG/iepro.exe
    .exe windows x86


    Headers

    Sections

  • IEG/shlobj71.ocx
    .dll regsvr32 windows x86

    2a3635438005b443f8b86eb59ec56b48


    Headers

    Imports

    Exports

    Sections

  • IEG/srck.exe
    .exe windows x86


    Headers

    Sections

  • IEG/sriecli.exe
    .exe windows x86


    Headers

    Sections

  • IEG/srieh.exe
    .exe windows x86


    Headers

    Sections

  • IEG/uicon.gif
    .gif
  • IEG/vbalExpBar6.ocx
    .dll regsvr32 windows x86

    8ac94e19973622da9cfb236dbba85547


    Headers

    Imports

    Exports

    Sections

  • IEG/vbalIml6.ocx
    .dll regsvr32 windows x86

    4762f9bedcf7dcd7ab0927a4256f5a09


    Headers

    Imports

    Exports

    Sections

  • IEG/xFoCtrl.dll
    .dll regsvr32 windows x86

    7de146e96b1265070990368b75f4ff4c


    Headers

    Imports

    Exports

    Sections

  • IEG/xFoCtrl2.dll
    .dll regsvr32 windows x86

    7de146e96b1265070990368b75f4ff4c


    Headers

    Imports

    Exports

    Sections

  • 下载说明.htm
    .html .js