Overview

overview

7

Static

static

7

SkinH_EL.dll

windows7-x64

7

SkinH_EL.dll

windows10-2004-x64

7

protobuf.dll

windows7-x64

3

protobuf.dll

windows10-2004-x64

3

qq名片�...��.exe

windows7-x64

7

qq名片�...��.exe

windows10-2004-x64

7

update.exe

windows7-x64

1

update.exe

windows10-2004-x64

1

zlib.dll

windows7-x64

3

zlib.dll

windows10-2004-x64

3

zlibwapi.dll

windows7-x64

3

zlibwapi.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d39f611a1aa9c396ac64311adb1bc8ee

  • Size

    2.2MB

  • MD5

    d39f611a1aa9c396ac64311adb1bc8ee

  • SHA1

    ef9f006cb056507dbc42ea9d1fec0cf1a6a1136a

  • SHA256

    b244d43028802f6d0f50d59495b6bcadbcb087f966b7ae357b0fa9e1f7b044c2

  • SHA512

    e034f84b0cce08ba16cd4cc6770ae64c0a90355404f32da8828aed8249bd6f1156c027f2b4c163f09fbf6e64edfda48ff0cf2979cc06696f7af53718c4e23ec9

  • SSDEEP

    49152:tUZ48eN112iWNC4TaO6FFU7kZ6c/cX2s2FRPKkJYaoVRE:tUZ9eQ7tOOoUYIys23PKNa6E

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • d39f611a1aa9c396ac64311adb1bc8ee
    .zip
  • SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • protobuf.dll
    .dll windows:5 windows x86 arch:x86

    205789903b6bdf9c4925f1c687c87317


    Headers

    Imports

    Exports

    Sections

  • qq名片刷赞精灵.exe
    .exe windows:4 windows x86 arch:x86

    e30db3aef521c95d2c1fdc6fcf45f597


    Headers

    Imports

    Sections

  • update.exe
    .exe windows:4 windows x86 arch:x86

    df92222445d4a9e4351594c6bdd45b8c


    Headers

    Imports

    Sections

  • zlib.dll
    .dll windows:5 windows x86 arch:x86

    b070f394134929dd5353cb9140a1caaf


    Headers

    Imports

    Exports

    Sections

  • zlibwapi.dll
    .dll windows:5 windows x86 arch:x86

    4a36fb6fbb4a473130a86670077c2f89


    Headers

    Imports

    Exports

    Sections