General

  • Target

    11179641845.zip

  • Size

    20.5MB

  • MD5

    85ac24468a62ae01ae65c71115a95852

  • SHA1

    567219d1aa7b37f48c15ee50b9e38ca843aa1031

  • SHA256

    708abc74dd4780fd0da05a03b2f97fd704f70a1d9e5defb51f2f2ef8ed5dcd09

  • SHA512

    0833faf1e3c28b5f412492103a1535a2f445c71402216611a529313eed8062f1830511436502e944562951916a656433fb8931487ee29c588968bccc2cda1558

  • SSDEEP

    393216:vqaNvBjHVTwxOumRZvAEG8LYHeXcWStTV1vkm2q/v8PtbDqeLXEyF5JgUpvRF5Z/:P9HVTWuRhApo6eX6tTV1vkmiDgyFc+vP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • 11179641845.zip
    .zip

    Password: infected

  • 0d394d701de6135c939c10fe64a515a3598d9371d95e83ed23f6c0672387a624
    .rar
  • jianpian/BrowserSDK.dll
    .dll windows x86

    3ccf6579df0250c7b82aa656288c7d18


    Headers

    Imports

    Exports

    Sections

  • jianpian/FileSuite.exe
    .exe windows x86

    7ed57f2cf09f5bc7960d41247ac0e083


    Headers

    Imports

    Sections

  • jianpian/Jp_Update.exe
    .exe windows x64

    9b657cb37371e98b9e0035aa0bbd9d92


    Headers

    Imports

    Sections

  • jianpian/LAVFilters/IntelQuickSyncDecoder.dll
    .dll windows x86

    5c08d638190ac736f36f7e3e6f412b0c


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/LAVAudio.ax
    .dll regsvr32 windows x86

    06c44546c9cda6b0cfbc4d3270c6f543


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/LAVFilters.Dependencies.manifest
    .xml
  • jianpian/LAVFilters/LAVSplitter.ax
    .dll regsvr32 windows x86

    edbbfa1b66a929ac1e13be7839eb2f48


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/LAVVideo.ax
    .dll regsvr32 windows x86

    268a21a5b07e31fe6f4146dc66f3bcfc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/avcodec-lav-58.dll
    .dll windows x86

    abf4e36f30f4abde67a52016849c4fea


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/avfilter-lav-7.dll
    .dll windows x86

    8390368691a80534368f5aa8cd7ee093


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/avformat-lav-58.dll
    .dll windows x86

    5ac56a994b1ebcda1642e2516c64b064


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/avresample-lav-4.dll
    .dll windows x86

    7ab943d6062378cfe1114bc3890be4b1


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/avutil-lav-56.dll
    .dll windows x86

    cc593dd140a05a900ff9c9699b92a3e9


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/libbluray.dll
    .dll windows x86

    665a755bcc9dd18dc497b3435e6f9395


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/sanear.ax
    .dll regsvr32 windows x86

    74172700541d0524f7c708455aebe548


    Headers

    Imports

    Exports

    Sections

  • jianpian/LAVFilters/swscale-lav-5.dll
    .dll windows x86

    d1f0c48cea0b67e9b66861d78b54faaa


    Headers

    Imports

    Exports

    Sections

  • jianpian/MediaInfo.dll
    .dll windows x86

    41008f6bb839b99074cea92b86c349b5


    Headers

    Imports

    Exports

    Sections

  • jianpian/Repair.dll
    .dll windows x86

    e9fc26a6f4c6c8f663429968def90275


    Headers

    Imports

    Exports

    Sections

  • jianpian/Viapi.dll
    .dll windows x86

    42bdfd785975e4aa84a649832b634342


    Headers

    Imports

    Exports

    Sections

  • jianpian/VideoInit.dll
    .dll windows x86

    a3077d7163a7f209f6eefec286fb557b


    Headers

    Imports

    Exports

    Sections

  • jianpian/Web.url
    .url
  • jianpian/client_windows_amd64.exe
    .exe windows x64

    4035d2883e01d64f3e7a9dccb1d63af5


    Headers

    Imports

    Sections

  • jianpian/data/error.png
    .png
  • jianpian/data/load.htm
  • jianpian/data/loading.gif
    .gif
  • jianpian/data/offline.html
  • jianpian/data/wkeoffline.html
  • jianpian/favorite.xml
    .xml
  • jianpian/icon/3gp.ico
  • jianpian/icon/asf.ico
  • jianpian/icon/ass.ico
  • jianpian/icon/avi.ico
  • jianpian/icon/bpc.ico
  • jianpian/icon/bsed.ico
  • jianpian/icon/dat.ico
  • jianpian/icon/divx.ico
  • jianpian/icon/f4v.ico
  • jianpian/icon/flv.ico
  • jianpian/icon/m2p.ico
  • jianpian/icon/m2ts.ico
  • jianpian/icon/m4v.ico
  • jianpian/icon/mkv.ico
  • jianpian/icon/mod.ico
  • jianpian/icon/mov.ico
  • jianpian/icon/mp2v.ico
  • jianpian/icon/mp3.ico
  • jianpian/icon/mp4.ico
  • jianpian/icon/mpeg.ico
  • jianpian/icon/mpeg4.ico
  • jianpian/icon/mpg.ico
  • jianpian/icon/mts.ico
  • jianpian/icon/pva.ico
  • jianpian/icon/rm.ico
  • jianpian/icon/rmvb.ico
  • jianpian/icon/srt.ico
  • jianpian/icon/ssa.ico
  • jianpian/icon/swf.ico
  • jianpian/icon/tp.ico
  • jianpian/icon/tps.ico
  • jianpian/icon/ts.ico
  • jianpian/icon/vob.ico
  • jianpian/icon/webm.ico
  • jianpian/icon/wma.ico
  • jianpian/icon/wmv.ico
  • jianpian/jianpian.exe
    .exe windows x86

    c60b4d9c7000b1bc1dde5de5194ea962


    Headers

    Imports

    Sections

  • jianpian/jianpianMovie.dll
    .dll windows x86

    435ae3b7f2983293d3ff6e10042d6257


    Headers

    Imports

    Exports

    Sections

  • jianpian/jianpianer.dll
    .dll windows x86

    09baf63def095946981d779be307e8a6


    Headers

    Imports

    Exports

    Sections

  • jianpian/jianpianhelp.dll
    .dll regsvr32 windows x64

    6232004a57db2bea0db9192235acdddc


    Headers

    Imports

    Exports

    Sections

  • jianpian/jpengine.exe
    .exe windows x86

    8c0fa0ccdbad0e35f0dcf15e25220166


    Headers

    Imports

    Sections

  • jianpian/libcurl.dll
    .dll windows x86

    2bbbe20996d1176fa9e886aeb3ea3808


    Headers

    Imports

    Exports

    Sections

  • jianpian/stophelp.bat
  • jianpian/stophelp.js
    .js
  • jianpian/uninstall.exe
    .exe windows x86

    d221b1dc8c3a08622f6512e7876527c8


    Headers

    Imports

    Sections

  • jianpian/uninstall.ini