General

  • Target

    49842b1e71ab037e48a822336cedde220b93e3fca667b7bd7c8cc9ec5489e49e

  • Size

    2.7MB

  • MD5

    876c537c1acdcde2de78304f3dd6cda3

  • SHA1

    8eefca6861cdd90eee7ef74c493fdc29ba43cbe7

  • SHA256

    49842b1e71ab037e48a822336cedde220b93e3fca667b7bd7c8cc9ec5489e49e

  • SHA512

    79c576ca4e156b2a895a39cec5fab961a8d07109d5321eb594d464434365c6a7ef6ee1a7e58906e5ac642dd9ed3b5ade75028d46bc3b7c43ced15bb7795fe023

  • SSDEEP

    49152:mM5edesYFCUqb14xBPTv1UD7vYwtiDC4O3XCb8Wf+O7mDnFJgZ5UAdmTiA0ti/y:mM5edesYFCUg6zmXvYIiDC5HCIZOmDFQ

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 49842b1e71ab037e48a822336cedde220b93e3fca667b7bd7c8cc9ec5489e49e
    .zip
  • 安装使用说明.txt
  • 幻想辅助3/236.bmp
  • 幻想辅助3/344.bmp
  • 幻想辅助3/360.log
  • 幻想辅助3/DM.dll
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • 幻想辅助3/EThread.fne
    .dll windows x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 幻想辅助3/QQ图片20140628231929.jpg
    .jpg
  • 幻想辅助3/San.dll
    .dll regsvr32 windows x86

    964d30f6d01b89b995a4da0284651b4d


    Headers

    Imports

    Exports

    Sections

  • 幻想辅助3/San.ini
  • 幻想辅助3/com.run
    .dll windows x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • 幻想辅助3/dj.bmp
  • 幻想辅助3/ds30.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 幻想辅助3/ds301.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 幻想辅助3/ds30试用版.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 幻想辅助3/ds30试用版(笔记本小屏幕用).exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 幻想辅助3/ds30(笔记本小屏幕用).exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 幻想辅助3/dy1.bmp
  • 幻想辅助3/dy2.bmp
  • 幻想辅助3/fj.bmp
  • 幻想辅助3/flagBackup.tmp
  • 幻想辅助3/fy.bmp
  • 幻想辅助3/fy1.bmp
  • 幻想辅助3/huanxiangshenyu.txt
  • 幻想辅助3/hxdy.txt
  • 幻想辅助3/hxgw.bmp
  • 幻想辅助3/hxjs.bmp
  • 幻想辅助3/hxrw1.bmp
  • 幻想辅助3/hxrw2.bmp
  • 幻想辅助3/hxsyrw.txt
  • 幻想辅助3/hxsyw7zk.txt
  • 幻想辅助3/hxtx1.bmp
  • 幻想辅助3/hxtx2.bmp
  • 幻想辅助3/kg.bmp
  • 幻想辅助3/krnln.fnr
    .dll windows x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 幻想辅助3/login.wav
  • 幻想辅助3/screen.jpg
    .jpg
  • 幻想辅助3/sddy.txt
  • 幻想辅助3/spec.fne
    .dll windows x86

    be3fe1d11f8ee4e772d13163095b126a


    Headers

    Imports

    Exports

    Sections

  • 幻想辅助3/ui.bmp
  • 幻想辅助3/ui1.bmp
  • 幻想辅助3/zdj.bmp
  • 幻想辅助3/zdj1.bmp
  • 幻想辅助3/zdj2.bmp
  • 幻想辅助3/zdj3.bmp
  • 幻想辅助3/zdrw.bmp
  • 幻想辅助3/小菜破戒.exe
    .exe windows x86

    b0e1e5222bb3fa864946fbc38bdccb0f


    Headers

    Imports

    Sections

  • 最新QQ软件下载.url
    .url