Overview

overview

7

Static

static

7

SyToolsBox/Help.chm

windows7-x64

1

SyToolsBox/Help.chm

windows10-2004-x64

1

SyToolsBox...ox.exe

windows7-x64

7

SyToolsBox...ox.exe

windows10-2004-x64

7

SyToolsBox...��.cmd

windows7-x64

1

SyToolsBox...��.cmd

windows10-2004-x64

1

SyToolsBox...��.cmd

windows7-x64

1

SyToolsBox...��.cmd

windows10-2004-x64

1

SyToolsBox...��.bat

windows7-x64

1

SyToolsBox...��.bat

windows10-2004-x64

1

SyToolsBox...��.cmd

windows7-x64

1

SyToolsBox...��.cmd

windows10-2004-x64

1

SyToolsBox...��.cmd

windows7-x64

7

SyToolsBox...��.cmd

windows10-2004-x64

7

SyToolsBox...��.bat

windows7-x64

4

SyToolsBox...��.bat

windows10-2004-x64

4

SyToolsBox...��.bat

windows7-x64

1

SyToolsBox...��.bat

windows10-2004-x64

1

SyToolsBox...��.bat

windows7-x64

1

SyToolsBox...��.bat

windows10-2004-x64

1

SyToolsBox...��.cmd

windows7-x64

7

SyToolsBox...��.cmd

windows10-2004-x64

7

SyToolsBox...��.cmd

windows7-x64

1

SyToolsBox...��.cmd

windows10-2004-x64

1

SyToolsBox...��.cmd

windows7-x64

1

SyToolsBox...��.cmd

windows10-2004-x64

1

SyToolsBox...��.bat

windows7-x64

4

SyToolsBox...��.bat

windows10-2004-x64

4

SyToolsBox...�).cmd

windows7-x64

1

SyToolsBox...�).cmd

windows10-2004-x64

1

SyToolsBox...�).cmd

windows7-x64

1

SyToolsBox...�).cmd

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    46b067259a16e7f28ef37511d76821e0

  • Size

    4.0MB

  • MD5

    46b067259a16e7f28ef37511d76821e0

  • SHA1

    c73902aec3b3a6aeb3d73d477521868d32074c01

  • SHA256

    47eb1319fa3a1e323da6bf722697addacbfc1f8a3e94bdbd38bec6afdb3597f8

  • SHA512

    42e701e21b7613a89f5041991a8deab19d1701aad8552fe93a1362966fcff63610dd06e9140809d09000bf985f9e86499822df80f9bfa842ef3ba36dddee891c

  • SSDEEP

    98304:gvgZFXrtNFT5vqbXLdIv0DFRNWN5s+bgxyD4NY1ujCC24wvEQ:gvgZFJLTtOWMDw7goD4NYksXcQ

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 46b067259a16e7f28ef37511d76821e0
    .rar
  • SyToolsBox/Help.chm
    .chm
  • SyToolsBox/SyToolsBox.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SyToolsBox/SyToolsBox.ini
  • SyToolsBox/实用批处理/(仅供备用)关闭系统本身的默认共享.cmd
  • SyToolsBox/实用批处理/(仅供备用)开启系统本身的默认共享.cmd
  • SyToolsBox/实用批处理/ARP本机绑定.bat
  • SyToolsBox/实用批处理/Autorun 病毒清除工具.CMD
  • SyToolsBox/实用批处理/IE不能打开新链接修复.cmd
  • SyToolsBox/实用批处理/Sort.ico
  • SyToolsBox/实用批处理/WINXP原本的各项服务.BAT
  • SyToolsBox/实用批处理/一键清理系统垃圾文件.bat
  • SyToolsBox/实用批处理/中文显示ping结果.bat
    .bat .vbs
  • SyToolsBox/实用批处理/修复EXE文件关联.cmd
  • SyToolsBox/实用批处理/关闭局域网共享.cmd
  • SyToolsBox/实用批处理/关闭所有分区自动播放.cmd
  • SyToolsBox/实用批处理/开启系统补丁自动更新.bat
  • SyToolsBox/实用批处理/开通局域网共享(无需验证即可进入).cmd
  • SyToolsBox/实用批处理/开通局域网共享(需证用户名和密码).cmd
  • SyToolsBox/实用批处理/彻底关闭自动更新功能.bat
  • SyToolsBox/实用批处理/恢复所有分区自动播放.cmd
  • SyToolsBox/实用批处理/断开网络联结.bat
  • SyToolsBox/实用批处理/显示IP配置.bat
  • SyToolsBox/实用批处理/查看安装日期及运行时间.cmd
  • SyToolsBox/实用批处理/查看网关的MAC地址.bat
  • SyToolsBox/实用批处理/查看进程使用的端口.bat
  • SyToolsBox/实用批处理/清除所有多余的启动项目.cmd
  • SyToolsBox/实用批处理/清除所有多余的桌面右键菜单.cmd
  • SyToolsBox/实用批处理/自动关闭空闲的IDE通道.bat
  • SyToolsBox/实用批处理/解决IIS无法调试的问题.cmd
  • SyToolsBox/实用注册表/(仅供备用)取消磁盘的自动扫描.reg
  • SyToolsBox/实用注册表/Administrator帐户设为不隐藏.reg
  • SyToolsBox/实用注册表/Sort.ico
  • SyToolsBox/实用注册表/不显示共享文档和用户文档.REG
  • SyToolsBox/实用注册表/修复EXE文件关联.REG
  • SyToolsBox/实用注册表/修复任务栏声音图标消失.reg
  • SyToolsBox/实用注册表/关闭光驱硬盘的自动运行.REG
  • SyToolsBox/实用注册表/去掉快捷方式小箭头(重启系统生效).reg
  • SyToolsBox/实用注册表/取消磁盘的自动扫描.reg
  • SyToolsBox/实用注册表/因装了KB905474正版验证补丁进系统受阻导入本注册表可破解.reg
  • SyToolsBox/实用注册表/安装SQL如提示挂起导入本注册表可解决.reg
  • SyToolsBox/实用注册表/恢复快捷方式小箭头(重启系统生效).reg
  • SyToolsBox/实用注册表/打开光驱硬盘的自动运行.REG
  • SyToolsBox/实用注册表/显示共享文档和用户文档.reg
  • SyToolsBox/实用注册表/显示隐藏文件(中了该类病毒后).reg
  • SyToolsBox/实用注册表/注册表编辑器regedit解禁.reg
  • SyToolsBox/实用注册表/注册表解禁.reg
  • SyToolsBox/实用注册表/禁止生成缩略图缓冲文件Thumbs.db.reg
  • SyToolsBox/实用注册表/若任务管理器被病毒禁用导入本注册表可解开.reg
  • SyToolsBox/常用小工具/Foxit Reader.EXE
    .exe windows:4 windows x86 arch:x86

    a900cce46c67759e2822a509e6acc601


    Headers

    Imports

    Sections

  • SyToolsBox/常用小工具/OEM-DIY.exe
    .exe windows:4 windows x86 arch:x86

    0c40996f6e1e5f2a82b51e9950881bf1


    Headers

    Imports

    Sections

  • SyToolsBox/常用小工具/ONES刻录工具.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • SyToolsBox/常用小工具/Reso.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • SyToolsBox/常用小工具/世纪前线网络质量测试工具.exe
    .exe windows:4 windows x86 arch:x86

    2e3109e855834205b603691f4225e497


    Headers

    Imports

    Sections

  • SyToolsBox/常用小工具/农历手册.EXE
    .exe windows:4 windows x86 arch:x86

    33b24602a3f7e9299ce7c89d86e9eacb


    Headers

    Imports

    Sections

  • SyToolsBox/常用小工具/定时关机.EXE
    .exe windows:4 windows x86 arch:x86

    664126ea733005fe0bedfa2a7669029f


    Headers

    Imports

    Sections

  • SyToolsBox/常用小工具/快速IP设置.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections