Overview

overview

7

Static

static

7

data/about/about.htm

windows7-x64

1

data/about/about.htm

windows10-2004-x64

1

data/advan...ch.htm

windows7-x64

1

data/advan...ch.htm

windows10-2004-x64

1

data/advan...bj.htm

windows7-x64

1

data/advan...bj.htm

windows10-2004-x64

1

data/confi...ig.htm

windows7-x64

1

data/confi...ig.htm

windows10-2004-x64

1

data/js/common.js

windows7-x64

1

data/js/common.js

windows10-2004-x64

1

data/js/iepngfx.js

windows7-x64

1

data/js/iepngfx.js

windows10-2004-x64

1

data/skins/QQ2009.sh

windows7-x64

3

data/skins/QQ2009.sh

windows10-2004-x64

3

data/skins/black.sh

windows7-x64

3

data/skins/black.sh

windows10-2004-x64

3

data/skins/skin.dll

windows7-x64

7

data/skins/skin.dll

windows10-2004-x64

7

data/新云软件.url

windows7-x64

1

data/新云软件.url

windows10-2004-x64

1

官方/作...��.url

windows7-x64

1

官方/作...��.url

windows10-2004-x64

1

官方/常...��.url

windows7-x64

1

官方/常...��.url

windows10-2004-x64

1

官方/软...��.url

windows7-x64

1

官方/软...��.url

windows10-2004-x64

1

百度图�...��.exe

windows7-x64

7

百度图�...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    041748b817e5c30960e344e380a63442

  • Size

    803KB

  • MD5

    041748b817e5c30960e344e380a63442

  • SHA1

    42bbe670f20dac07b9bb05a7d04f761474f27506

  • SHA256

    37508b28d5504049eb86b5b438da64d1e4fda554ae475644aa342b04e7ace972

  • SHA512

    572caaa4bc1cde02e441e30b7ad91a1c17d833cc11ea2e16a54210eb60cda50b8643c19c6d1a5573a11e17305ddbda81ec760e4ef09286bc6d828a8ee2ab2357

  • SSDEEP

    12288:oweS6lcdberK3w3Jhdct+8qngDfG2AiXIkivhoZp6neYNcn0U87D70dyRE6qFQWW:klyQVZ7vgDe1kYaZ4zDoIE6SV+J

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 041748b817e5c30960e344e380a63442
    .rar
  • data/about/about.htm
    .html
  • data/about/logo.gif
    .gif
  • data/advanced/advancedsearch.htm
    .html
  • data/advanced/bottombj.htm
  • data/advanced/help.png
    .png
  • data/advanced/help_hover.png
    .png
  • data/advanced/images/diy.gif
    .gif
  • data/advanced/title.ico
  • data/config/config.htm
    .html
  • data/config/download.png
    .png
  • data/config/title.ico
  • data/download/desktop/desktop.ini
  • data/download/desktop/slicer.ico
  • data/download/download_complete.wav
  • data/js/common.js
    .js
  • data/js/iepngfx.js
    .js
  • data/language/english.conf
  • data/language/简体中文.conf
  • data/main.conf
  • data/shutdown/shut_down.png
    .png
  • data/shutdown/shutdown.htm
    .html .js polyglot
  • data/skins/QQ2009.sh
  • data/skins/black.sh
  • data/skins/skin.conf
  • data/skins/skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • data/style/common.css
  • data/数据目录，请勿随意修改！
  • data/新云软件.url
    .url
  • 官方/作者博客.URL
  • 官方/常见问题帮助.URL
  • 官方/软件主页.URL
  • 百度图片疯狂下载.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 软件截图.jpg
    .jpg