General

  • Target

    43e6d9d9c002163dc34a0c79baee2416

  • Size

    486KB

  • MD5

    43e6d9d9c002163dc34a0c79baee2416

  • SHA1

    7c6899d966e0fc03354ec2a0fe9bf282f6c837e2

  • SHA256

    7e8e9b91586150feed7ac9bbd6b3dcc80c9512ecac48534eddd3722bacca0f8c

  • SHA512

    3f4879e3cedec567e776bddfa14a09850dc3a014091f8c05e485819c4b8d896152c39a80a6ef519b994788a3098f5f38996c987e37b88e959317a54e874b82d6

  • SSDEEP

    12288:b89P42plZIEylHiaOk/fT6+C1knevQibZwK0bmrr0bfTOk/n8:Ym2pDIEOiaOk39nevZwK8mKTOen8

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 43e6d9d9c002163dc34a0c79baee2416
    .rar
  • gutou_qqshan/gutou_qqshan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • gutou_qqshan/pthreadVC2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • gutou_qqshan/qq.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections