General

  • Target

    DllHijacking.rar

  • Size

    541KB

  • MD5

    b04523a7ca9229acf1fa91d3ce466064

  • SHA1

    1a6368faaf4d504f137336a278a0bc77cd0c0121

  • SHA256

    fc1a679d9c378e50f683449cc6c35c2ad34b4c9d502884b7ee456587f04b707f

  • SHA512

    1b1eb894a7a5edb6b50171a1147bfd1e656bff193143d98ee44646ad36d4cadaa1b399d94b7a440e8dd3513d9e4b658a26a5d82707095bfe06cb49e18fd30c6c

  • SSDEEP

    12288:7etIQkA1Yes+QxvMIDi09ssTtBSmFLFoAEQcH:7etIQkA1xRQpV8sRwmRFoTPH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DllHijacking.rar
    .rar
  • DllHijacking/AliIM.exe
    .exe windows x86

    9f7d35d13d490935ed4b82591527ee84


    Code Sign

    Headers

    Imports

    Sections

  • DllHijacking/AliwangwangFramework.dll
    .dll windows x86

    122ca2364f51f2fb4f5d7337aabac123


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DllHijacking/UpdateAssist.dll
    .dll windows x86

    5da04e9834aebe1743fa702b682b7816


    Headers

    Imports

    Exports

    Sections

  • DllHijacking/ZP.log