General

  • Target

    5dfd5dff56114318ce77baf25538fb49

  • Size

    6.8MB

  • MD5

    5dfd5dff56114318ce77baf25538fb49

  • SHA1

    8f0d2ce8ef01e3a7bc20bee5b38d4440846fbfad

  • SHA256

    2f1df62cfd8f92f46a8b26d05fbb850bb50db90b4efc7799e6e7b90bfa9f1ac3

  • SHA512

    595f8507e697ff498b5e466c0219d125d14f1321ce70ba6b821f98c01bf83a3ab3cb8883d73fc8292e08c192d8539f55a1587e525ed943f953f509ac340bcf39

  • SSDEEP

    196608:FqNqh2yB7B+hoQFLPXSWL4qAe48YMXeZlE9:FUrUIDXt3RpuZ+9

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Requests dangerous framework permissions 1 IoCs
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 5dfd5dff56114318ce77baf25538fb49
    .zip
  • ZhuodashiResource/HttpFtp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ZhuodashiResource/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ZhuodashiResource/LinqBridge.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ZhuodashiResource/Newtonsoft.Json.Net20.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ZhuodashiResource/ZhuoDaShi_Open.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • ZhuodashiResource/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ZhuodashiResource/sdk/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ZhuodashiResource/sdk/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ZhuodashiResource/sdk/aapt.exe
    .exe windows:4 windows x86 arch:x86

    f6776fd3ee99049db627787b022e6a83


    Code Sign

    Headers

    Imports

    Sections

  • ZhuodashiResource/sdk/fastboot.exe
    .exe windows:4 windows x86 arch:x86

    8eeaec519a7bfb32f5b153e8b50ce1e0


    Headers

    Imports

    Sections

  • ZhuodashiResource/sdk/wandoujia_daemon.exe
    .exe windows:4 windows x86 arch:x86

    fef6cee9d0e4eec527f09da74363e32f


    Code Sign

    Headers

    Imports

    Sections

  • ZhuodashiResource/tools/DPInst.exe
    .exe windows:6 windows x86 arch:x86

    0bbb04de18f86a2d1ac8d1d580c5be48


    Code Sign

    Headers

    Imports

    Sections

  • ZhuodashiResource/tools/DPInst64.exe
    .exe windows:5 windows x64 arch:x64

    fdb811d371295a4f4bb1e322acdf41e8


    Code Sign

    Headers

    Imports

    Sections

  • ZhuodashiResource/tools/Superuser.apk
    .apk android

    com.noshufou.android.su

    HomeActivity


  • ZhuodashiResource/tools/Superuser_4.apk
    .apk android

    eu.chainfire.supersu

    .MainActivity


  • ZhuodashiResource/tools/ZMaster.apk
    .apk android

    cn.opda.android.activity

    cn.com.opda.android.mainui.MainActivity


  • ZhuodashiResource/tools/ZmasterSprite.apk
    .apk android

    cn.opda.android.zmaster.sprite

    .SpriteActivity


  • ZhuodashiResource/tools/busybox
    .elf linux arm
  • ZhuodashiResource/tools/flash_image
    .elf linux arm
  • ZhuodashiResource/tools/su1
    .elf linux arm
  • ZhuodashiResource/tools/su2
    .elf linux arm
  • ZhuodashiResource/tools/su4
    .elf linux arm
  • ZhuodashiResource/tools/zergRush
    .elf linux arm
  • ZhuodashiResource/zhuodashi.conf