General

  • Target

    1d3e43d4f670b3b35fffec8e35d3c9ba

  • Size

    17KB

  • MD5

    1d3e43d4f670b3b35fffec8e35d3c9ba

  • SHA1

    a7ef0302ddfbaa60965a411259398ad3d3438dcd

  • SHA256

    39d3afbfd7219a3bd450d8e5318b33411fed082f04d7d7bda719e3f2274cf78a

  • SHA512

    5a3f53aa8aafc75c3a23d780b24e75ceb730f729c673f071e0d7b6524cf61988c5805fcd4fa32a9eb9047daaee23a92ca5473643a497a87004db56a63b86b08e

  • SSDEEP

    384:xjwCxIzygT6tWzhJOtilrifGODuGrCfZ+4Zm7g2h6EGfec2Nj/Q/F5ARkozUAa:xjwCxIzutWtsgifG7Hf4CCg2eh2NzQ/n

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d3e43d4f670b3b35fffec8e35d3c9ba
    .rar
  • VB程序太平洋.EXE
    .exe windows:4 windows x86 arch:x86

    d2649867cedca90066a116140657c3c4


    Headers

    Imports

    Sections

  • shelllnk.bas
  • shelllnk.cls
    .vbs
  • shelllnk.cmp
    .dll regsvr32 windows:4 windows x86 arch:x86

    6f73b43b9bca504177ce8435af21af05


    Headers

    Imports

    Exports

    Sections

  • shelllnk.odl
  • shelllnk.tlb
  • shelllnk.vbp
  • 下载说明.htm
    .html .js polyglot