Overview

overview

7

Static

static

7

票_据.exe

windows7-x64

7

票_据.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Desktop.zip

  • Size

    726KB

  • MD5

    e246ae7e246c2b2338ef39b5e9939eb0

  • SHA1

    8949c272d89bab738829ffef1c32d21e678dc08f

  • SHA256

    854102ce0b7bfa33c717e4b8c5733cb8485a0eccc107879dbd4f628076a920df

  • SHA512

    16bc0975d95f7652b58ff060e3ff9e6b0a953b1cf759c68494316289128d161e44b6580c9bdf493889389f4e25432608122e7f5ba75236dffd7d9d75f5d276a3

  • SSDEEP

    12288:9WVwx1ONnb1D52lCec+t67p48j41ErhI0IVZDJOPIwKrKcso6Y/aE2lWTM9eS1s6:9Zx1mhd2l9c1dYEGBVxJOwwKryY/a/lj

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • Desktop.zip
    .zip

    Password: infected

  • php5ts.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • 票_据.data
  • 票_据.exe
    .exe windows x86

    67bfdb134f0fdf5aaedc30c76c31917d


    Headers

    Imports

    Sections