General

  • Target

    021e6b1de790f379d7d1134612dfe64c3ac187b27ba4b9e909f3993891fce350

  • Size

    11.9MB

  • MD5

    d0d982a8a27b4dd654b2d04a8256149e

  • SHA1

    d78e225f9c2a6fe8366b72078b62586c23d5988f

  • SHA256

    021e6b1de790f379d7d1134612dfe64c3ac187b27ba4b9e909f3993891fce350

  • SHA512

    fb8ff4bbafb628b4967fdb3d1a95d230cde45bc51a920fdb7eac829cc997979b4e2e06fb8d63c1ffe3eaabf689df9038e88ea2bd140df2310160516d0c93a15f

  • SSDEEP

    196608:R9LjoQEVNR725jmHDPkH8Xiufv2RNRV3F3aELVq5ThFXtzg7J/SW7iuQQ1Wt/NnL:RmQ02mHDcH8pv2RNX8EJq5ThFXtk7JwP

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 6 IoCs

    Detects file using ACProtect software.

  • UPX packed file 9 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 021e6b1de790f379d7d1134612dfe64c3ac187b27ba4b9e909f3993891fce350
    .zip
  • Protection.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • QYBot.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • Updater.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • main/bin/Libcurl.dll
    .dll windows:4 windows x86

    44bfbdda8e8f74901d005b8710a73d3d


    Headers

    Imports

    Exports

    Sections

  • main/bin/ewe.dll
    .dll windows:5 windows x86


    Headers

    Exports

    Sections

  • main/bin/gzip.dll
    .dll windows:5 windows x86


    Headers

    Exports

    Sections

  • main/bin/libeay32.dll
    .dll windows:5 windows x86


    Headers

    Exports

    Sections

  • main/bin/node.dll
    .dll windows:5 windows x86


    Headers

    Exports

    Sections

  • main/bin/sqlite3.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • main/bin/zlib.dll
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • 开发SDK/QYBot_Dev_20230831.ec
  • 开发SDK/QYBot_SDK_20230831.e
  • 开发SDK/zyJson3.2.8.ec
  • 开发SDK/模块源码/QYBot_Dev_20230831.e
  • 开发SDK/模块源码/zyJson3.2.8.e
  • 更新日志.txt