General

  • Target

    fee404e23a383d15b63c93623a652114

  • Size

    14.9MB

  • MD5

    fee404e23a383d15b63c93623a652114

  • SHA1

    eafe8383ec3e5cc8426d2c854d0fa97ce8df99c3

  • SHA256

    6dcce0e5dded9bbf8b227e8e450520c3017ecba42571558d3c64701e29321e5b

  • SHA512

    1c441477c1561f915d3b6fcdfa9b49e44c3ef656d64083e9cdf2cfece37e10ad80bc3066e7f0afd3614d7d8ae773ea535abad57c824a63ce2fa8b38e543a3fb7

  • SSDEEP

    393216:0dcMoXvnX9lOluGtpUmIQsmGhgKQWXUtYs5gha0Gqp:0dcMavOldMlkGhg4Y75Gahqp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fee404e23a383d15b63c93623a652114
    .rar
  • xqmspjb/下载说明.txt
  • xqmspjb/新云软件.url
    .url
  • xqmspjb/象棋名手+冰河.zip
    .zip
  • ǿ+/BHGui.exe
    .exe windows:5 windows x86 arch:x86

    f11e968fbc14cf2f86411bb163e4b4e3


    Code Sign

    Headers

    Imports

    Sections

  • ǿ+/Background/001.jpg
    .jpg
  • ǿ+/Background/002.JPG
    .jpg
  • ǿ+/Background/003.jpg
    .jpg
  • ǿ+/BoardImage/001.jpg
    .jpg
  • ǿ+/BoardImage/002.jpg
    .jpg
  • ǿ+/BoardImage/003.jpg
    .jpg
  • ǿ+/BoardImage/xy1.png
    .png
  • ǿ+/BoardImage/xy2.png
    .png
  • ǿ+/Engines/6uȨ/key.txt
  • ǿ+/Engines/6uȨ/xqms.lic
  • ǿ+/Engines/6uȨ/xqms.rc
  • ǿ+/Engines/6uȨ/xqmseng-6u.exe
    .exe windows:5 windows x86 arch:x86

    9e759935c3cf889b35040fb91fff92fb


    Headers

    Imports

    Exports

    Sections

  • ǿ+/Piece/MiniBoard/BC.BMP
  • ǿ+/Piece/MiniBoard/BE.BMP
  • ǿ+/Piece/MiniBoard/BG.BMP
  • ǿ+/Piece/MiniBoard/BH.BMP
  • ǿ+/Piece/MiniBoard/BK.BMP
  • ǿ+/Piece/MiniBoard/BP.BMP
  • ǿ+/Piece/MiniBoard/BR.BMP
  • ǿ+/Piece/MiniBoard/MM.bmp
  • ǿ+/Piece/MiniBoard/MiniBoard.bmp
  • ǿ+/Piece/MiniBoard/RC.BMP
  • ǿ+/Piece/MiniBoard/RE.BMP
  • ǿ+/Piece/MiniBoard/RG.BMP
  • ǿ+/Piece/MiniBoard/RH.BMP
  • ǿ+/Piece/MiniBoard/RK.BMP
  • ǿ+/Piece/MiniBoard/RP.BMP
  • ǿ+/Piece/MiniBoard/RR.BMP
  • ǿ+/Piece/large/ba.png
    .png
  • ǿ+/Piece/large/bb.png
    .png
  • ǿ+/Piece/large/bc.png
    .png
  • ǿ+/Piece/large/bk.png
    .png
  • ǿ+/Piece/large/bn.png
    .png
  • ǿ+/Piece/large/bp.png
    .png
  • ǿ+/Piece/large/br.png
    .png
  • ǿ+/Piece/large/mm.png
    .png
  • ǿ+/Piece/large/ra.png
    .png
  • ǿ+/Piece/large/rb.png
    .png
  • ǿ+/Piece/large/rc.png
    .png
  • ǿ+/Piece/large/rk.png
    .png
  • ǿ+/Piece/large/rn.png
    .png
  • ǿ+/Piece/large/rp.png
    .png
  • ǿ+/Piece/large/rr.png
    .png
  • ǿ+/Piece/middle/bc.png
    .png
  • ǿ+/Piece/middle/be.png
    .png
  • ǿ+/Piece/middle/bg.png
    .png
  • ǿ+/Piece/middle/bh.png
    .png
  • ǿ+/Piece/middle/bk.png
    .png
  • ǿ+/Piece/middle/bp.png
    .png
  • ǿ+/Piece/middle/br.png
    .png
  • ǿ+/Piece/middle/mm.png
    .png
  • ǿ+/Piece/middle/rc.png
    .png
  • ǿ+/Piece/middle/re.png
    .png
  • ǿ+/Piece/middle/rg.png
    .png
  • ǿ+/Piece/middle/rh.png
    .png
  • ǿ+/Piece/middle/rk.png
    .png
  • ǿ+/Piece/middle/rp.png
    .png
  • ǿ+/Piece/middle/rr.png
    .png
  • ǿ+/Piece/small/ba.png
    .png
  • ǿ+/Piece/small/bb.png
    .png
  • ǿ+/Piece/small/bc.png
    .png
  • ǿ+/Piece/small/bk.png
    .png
  • ǿ+/Piece/small/bn.png
    .png
  • ǿ+/Piece/small/bp.png
    .png
  • ǿ+/Piece/small/br.png
    .png
  • ǿ+/Piece/small/mask.png
    .png
  • ǿ+/Piece/small/ra.png
    .png
  • ǿ+/Piece/small/rb.png
    .png
  • ǿ+/Piece/small/rc.png
    .png
  • ǿ+/Piece/small/rk.png
    .png
  • ǿ+/Piece/small/rn.png
    .png
  • ǿ+/Piece/small/rp.png
    .png
  • ǿ+/Piece/small/rr.png
    .png
  • ǿ+/Sound/DING.WAV
  • ǿ+/Sound/MenuCommand.wav
  • ǿ+/Sound/MenuPopup.wav
  • ǿ+/Sound/capture.WAV
  • ǿ+/Sound/check.WAV
  • ǿ+/Sound/deng.wav
  • ǿ+/Sound/jeer.wav
  • ǿ+/Sound/move.wav
  • ǿ+/Sound/newgame.wav
  • ǿ+/Sound/pick.wav
  • ǿ+/Sound/redo.wav
  • ǿ+/Sound/skip.wav
  • ǿ+/Sound/undo.wav
  • ǿ+/account.db
  • ǿ+/bcg.xml
  • ǿ+/bhhelp.chm
    .chm
  • ǿ+/connect.db
  • ǿ+/engines.db
  • ǿ+/fkwin.dll
    .dll windows:5 windows x86 arch:x86

    6f96928a34558e75493840f40566d277


    Headers

    Imports

    Exports

    Sections

  • ǿ+/obks.db
  • ǿ+/setting.ini
  • ǿ+/ĵ/bhobk/SQLite3.lib
  • ǿ+/ĵ/bhobk/bhobk.c
  • ǿ+/ĵ/bhobk/bhobk.sln
  • ǿ+/ĵ/bhobk/bhobk.vcproj
    .xml
  • ǿ+/ĵ/bhobk/sqlite3.h
  • ǿ+/ĵ/Э/uci.htm
    .html
  • ǿ+/ĵ/Э/ͨЭ飨uci.htm
    .html
  • ǿ+/ĵ/Э/йͨЭ V3.0.htm
    .html
  • ǿ+/ĵ/HASHKEY.txt