General

  • Target

    5aaea0a6030e40669a71e0a4078ba38296f56cf6a4207824702de4e3f669b2dc

  • Size

    6.6MB

  • MD5

    70087da363dc7e5affc1430bee2e49c2

  • SHA1

    309a91c6f1876c90fbcc691f8fbd79d5794d79e8

  • SHA256

    5aaea0a6030e40669a71e0a4078ba38296f56cf6a4207824702de4e3f669b2dc

  • SHA512

    c09fa6f91d64e917457b81bb06886549324818aaded53d728a0aac62b744b8d8fb8fdb1d734a1f2ed5c7c07b9ec5b0b9ed18bdb00396a46bb1493a8831790f2c

  • SSDEEP

    98304:i5vzGEvhd/bTGXyVYOVd4vYJFBnoHGGsdPC5GBFZy2TRyyD/RJzNDhVM4vCTa:iZ/PGoF74QJ3nckPCYlHUK7NDhfz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • 5aaea0a6030e40669a71e0a4078ba38296f56cf6a4207824702de4e3f669b2dc
    .zip
  • 晴空IP-KVM_V4.1.7/1.使用教程及注意事项.doc
    .doc windows office2003
  • 晴空IP-KVM_V4.1.7/2. 安装键鼠线驱动(需要在中间机上安装).EXE
    .exe windows:4 windows x86 arch:x86

    bc5ce990cf54f8d435a68eb97512f73e


    Code Sign

    Headers

    Imports

    Sections

  • 晴空IP-KVM_V4.1.7/3. 修改键鼠线配置 (设置完成后需要重新拔插键鼠线两端USB).exe
    .exe windows:4 windows x86 arch:x86

    ad01c6a13d458bcdacc4b01c05f331ce


    Headers

    Imports

    Sections

  • 晴空IP-KVM_V4.1.7/4. 注册OCX控件 (如果KVM程序能够正常打开此步骤可不做).bat
  • 晴空IP-KVM_V4.1.7/5. 辅助软件(增强用户使用体验)/自动切换输入法----KVM窗口激活时自动将中间机输入法切换成英文.zip
    .zip
  • KBLAutoSwitch/Curs/原版/1080/IBEAM_Cn.cur
  • KBLAutoSwitch/Curs/原版/1080/IBEAM_Cn_A.cur
  • KBLAutoSwitch/Curs/原版/1080/IBEAM_En.cur
  • KBLAutoSwitch/Curs/原版/1080/IBEAM_En_A.cur
  • KBLAutoSwitch/Curs/原版/1080/NORMAL_Cn.cur
  • KBLAutoSwitch/Curs/原版/1080/NORMAL_Cn_A.cur
  • KBLAutoSwitch/Curs/原版/1080/NORMAL_En.cur
  • KBLAutoSwitch/Curs/原版/1080/NORMAL_En_A.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/IBEAM_Cn.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/IBEAM_Cn_A.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/IBEAM_En.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/IBEAM_En_A.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/NORMAL_Cn.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/NORMAL_Cn_A.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/NORMAL_En.cur
  • KBLAutoSwitch/Curs/红蓝原版-快乐男孩/1080/NORMAL_En_A.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/APPSTARTING.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/HAND.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/HELP.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/IBEAM_Cn.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/IBEAM_Cn_A.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/IBEAM_En.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/IBEAM_En_A.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/NORMAL_Cn.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/NORMAL_Cn_A.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/NORMAL_En.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/NORMAL_En_A.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/SIZEALL.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/SIZENESW.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/SIZENS.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/SIZENWSE.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/SIZEWE.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1080/WAIT.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/APPSTARTING.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/HAND.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/HELP.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/IBEAM_Cn.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/IBEAM_Cn_A.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/IBEAM_En.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/IBEAM_En_A.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/NORMAL_Cn.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/NORMAL_Cn_A.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/NORMAL_En.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/NORMAL_En_A.ani
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/SIZEALL.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/SIZENESW.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/SIZENS.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/SIZENWSE.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/SIZEWE.cur
  • KBLAutoSwitch/Curs/红蓝呼吸灯/1440/WAIT.ani
  • KBLAutoSwitch/Icos/原版/black_A_CN.ico
  • KBLAutoSwitch/Icos/原版/black_A_EN.ico
  • KBLAutoSwitch/Icos/原版/black_Cn.ico
  • KBLAutoSwitch/Icos/原版/black_CnEn.ico
  • KBLAutoSwitch/Icos/原版/black_En.ico
  • KBLAutoSwitch/Icos/原版/white_A_CN.ico
  • KBLAutoSwitch/Icos/原版/white_A_EN.ico
  • KBLAutoSwitch/Icos/原版/white_Cn.ico
  • KBLAutoSwitch/Icos/原版/white_CnEn.ico
  • KBLAutoSwitch/Icos/原版/white_En.ico
  • KBLAutoSwitch/Icos/管理员版/Black_A_CN.ico
  • KBLAutoSwitch/Icos/管理员版/Black_A_EN.ico
  • KBLAutoSwitch/Icos/管理员版/Black_Cn.ico
  • KBLAutoSwitch/Icos/管理员版/Black_CnEn.ico
  • KBLAutoSwitch/Icos/管理员版/Black_En.ico
  • KBLAutoSwitch/Icos/管理员版/White_A_CN.ico
  • KBLAutoSwitch/Icos/管理员版/White_A_EN.ico
  • KBLAutoSwitch/Icos/管理员版/White_Cn.ico
  • KBLAutoSwitch/Icos/管理员版/White_CnEn.ico
  • KBLAutoSwitch/Icos/管理员版/White_En.ico
  • KBLAutoSwitch/KBLAutoSwitch.ahk
  • KBLAutoSwitch/KBLAutoSwitch.exe
    .exe windows:5 windows x64 arch:x64

    8bdd24038c55ff77490879f5a981813c


    Headers

    Imports

    Sections

  • KBLAutoSwitch/KBLAutoSwitch.ini
  • 晴空IP-KVM_V4.1.7/5. 辅助软件(增强用户使用体验)/透明鼠标主题----隐藏内网鼠标只显示中间机鼠标.zip
    .zip
  • 全透明指针/AppStarting.cur
  • 全透明指针/Arrow.cur
  • 全透明指针/Cross.cur
  • 全透明指针/Hand.cur
  • 全透明指针/Handwriting.cur
  • 全透明指针/Help.ani
  • 全透明指针/IBeam.cur
  • 全透明指针/No.ani
  • 全透明指针/Setup.inf
  • 全透明指针/SizeAll.cur
  • 全透明指针/SizeNESW.cur
  • 全透明指针/SizeNS.cur
  • 全透明指针/SizeNWSE.cur
  • 全透明指针/SizeWE.cur
  • 全透明指针/UpArrow.cur
  • 全透明指针/Wait.ani
  • 晴空IP-KVM_V4.1.7/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/dt.ini
  • 晴空IP-KVM_V4.1.7/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    c0c83ce3c8933e771c5efabbc1925abb


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/eGrid.fne
    .dll windows:4 windows x86 arch:x86

    4c3cd58396c7397a475b137aca75efcb


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/iext.fnr
    .dll windows:4 windows x86 arch:x86

    08cfcb998694241d9af66cc88c7cb611


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/kb_mouse.dll
    .dll windows:4 windows x86 arch:x86

    56b735cb51f0e800202757df5ac9ae51


    Headers

    Imports

    Sections

  • 晴空IP-KVM_V4.1.7/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    260506ac03052372277091974eead8e8


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/kvm.ini
  • 晴空IP-KVM_V4.1.7/mp3.run
    .dll windows:4 windows x86 arch:x86

    0d8883fcd2ea3109e5c236a22c15dac3


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/psyz.dll
  • 晴空IP-KVM_V4.1.7/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/spec.fne
    .dll windows:4 windows x86 arch:x86

    44912959aafe04feb6a5e77ff70ccd33


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/videocapx.ocx
    .dll regsvr32 windows:5 windows x86 arch:x86

    4c97ed5baf908e0c979281a47a8ba991


    Headers

    Imports

    Exports

    Sections

  • 晴空IP-KVM_V4.1.7/videocapx注册机.exe
    .exe windows:4 windows x86 arch:x86

    3424ca02d6a6e0a2787a25eea391c4a8


    Headers

    Imports

    Sections

  • 晴空IP-KVM_V4.1.7/免责声明.txt
  • 晴空IP-KVM_V4.1.7/晴空kvm_V4.1.7.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 晴空IP-KVM_V4.1.7/更新说明.txt