Overview

overview

7

Static

static

7

sxwnl/sxwnl.exe

windows7-x64

7

sxwnl/sxwnl.exe

windows10-2004-x64

7

sxwnl/sxwnl.js

windows7-x64

1

sxwnl/sxwnl.js

windows10-2004-x64

1

sxwnl/新�...��.url

windows7-x64

1

sxwnl/新�...��.url

windows10-2004-x64

1

sxwnl/源程序/JW.js

windows7-x64

1

sxwnl/源程序/JW.js

windows10-2004-x64

1

sxwnl/源�...eph.js

windows7-x64

1

sxwnl/源�...eph.js

windows10-2004-x64

1

sxwnl/源�...ph0.js

windows7-x64

1

sxwnl/源�...ph0.js

windows10-2004-x64

1

sxwnl/源�...phB.js

windows7-x64

1

sxwnl/源�...phB.js

windows10-2004-x64

1

sxwnl/源�...p1.htm

windows7-x64

1

sxwnl/源�...p1.htm

windows10-2004-x64

1

sxwnl/源�...in.bat

windows7-x64

1

sxwnl/源�...in.bat

windows10-2004-x64

1

sxwnl/源�...elp.js

windows7-x64

1

sxwnl/源�...elp.js

windows10-2004-x64

1

sxwnl/源�...Zip.js

windows7-x64

1

sxwnl/源�...Zip.js

windows10-2004-x64

1

sxwnl/源�...nar.js

windows7-x64

1

sxwnl/源�...nar.js

windows10-2004-x64

1

sxwnl/源�...me.htm

windows7-x64

1

sxwnl/源�...me.htm

windows10-2004-x64

1

sxwnl/源�...m1.htm

windows7-x64

1

sxwnl/源�...m1.htm

windows10-2004-x64

1

sxwnl/源�...m3.htm

windows7-x64

1

sxwnl/源�...m3.htm

windows10-2004-x64

1

sxwnl/源�...m4.htm

windows7-x64

1

sxwnl/源�...m4.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d6136a9a0f2d711dd5909962452c6f1

  • Size

    971KB

  • MD5

    1d6136a9a0f2d711dd5909962452c6f1

  • SHA1

    da8f9c69d0f556133b3b786f27b77971093353ee

  • SHA256

    da89436dc8e9ad41867813058b228d9cf37a464a70c68ea833192a090dca848e

  • SHA512

    bca9617278a624cf74e6531d792dfc6412873d068fdce334edf5c31cc814f574a70a75f8697e3d39a6decea8fef20279f3a43b5f7f15e8425826676c2c76e0d7

  • SSDEEP

    24576:RygMVKy4z/qgcao6A6drOWi0/Dpitzb8PvUEGtuQthHLqRh8zq:uV74TC6drZpYArUuQtFLqRhJ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d6136a9a0f2d711dd5909962452c6f1
    .rar
  • sxwnl/sxwnl.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • sxwnl/sxwnl.htm
    .js
  • sxwnl/新云软件.url
    .url
  • sxwnl/源程序/JW.js
    .js
  • sxwnl/源程序/eph.js
    .js
  • sxwnl/源程序/eph0.js
    .js
  • sxwnl/源程序/ephB.js
    .js
  • sxwnl/源程序/exphelp1.htm
  • sxwnl/源程序/hebin.bat
  • sxwnl/源程序/help.js
    .js
  • sxwnl/源程序/img/a001.gif
    .gif
  • sxwnl/源程序/img/a002.gif
  • sxwnl/源程序/img/a003.gif
    .gif
  • sxwnl/源程序/img/a004.GIF
    .gif
  • sxwnl/源程序/img/a005.gif
    .gif
  • sxwnl/源程序/img/a006.GIF
    .gif
  • sxwnl/源程序/img/a007.GIF
    .gif
  • sxwnl/源程序/index.htm
    .html .js polyglot
  • sxwnl/源程序/jsZip.js
    .js
  • sxwnl/源程序/lunar.js
    .js
  • sxwnl/源程序/readme.htm
    .html
  • sxwnl/源程序/sm1.htm
    .html
  • sxwnl/源程序/sm2.htm
    .html .js polyglot
  • sxwnl/源程序/sm3.htm
    .html
  • sxwnl/源程序/sm4.htm
    .html
  • sxwnl/源程序/sm5.htm
    .html
  • sxwnl/源程序/sm6.htm
    .html .js polyglot
  • sxwnl/源程序/sm7.htm
    .html
  • sxwnl/源程序/sm8.htm
    .html .js polyglot
  • sxwnl/源程序/tools.js
    .js
  • sxwnl/源程序/vml.js
    .js
  • sxwnl/源程序/精度表.txt
  • sxwnl/附件/fj1.htm
    .js
  • sxwnl/附件/fj2.htm
    .html .js polyglot
  • sxwnl/附件/fj3.htm
  • sxwnl/附件/fj4.htm
    .html .js polyglot
  • sxwnl/附件/fj5.htm
    .html .js polyglot
  • sxwnl/附件/index.htm
    .html
  • sxwnl/附件/nun.htm
    .js
  • sxwnl/附件/ss_jq.htm
    .html .js polyglot
  • sxwnl/附件/xk0.txt
  • sxwnl/附件/xx1.htm
    .html .js polyglot
  • sxwnl/附件/xx2.htm
    .html .js polyglot
  • sxwnl/附件/xx3.htm
    .html .js polyglot