DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
General
-
Target
1d88915215d7b9db15e1671ec5b46f04
-
Size
9.2MB
-
MD5
1d88915215d7b9db15e1671ec5b46f04
-
SHA1
b4684219dae0bcc1cbca04291e246ca7a0ce3176
-
SHA256
3c98ead4523e58fa993215b0536711d1e8d99be715b1f62855a3b39a0d879d8b
-
SHA512
6a6938c7533d2fbce48a04c15b79b241a0f89d113513d6ad60bf48c1132b88abcd3cef8e42606d88467c1bad134120c672eef6bd70cd2e11fc32b9ef4030cf3c
-
SSDEEP
196608:OLEaE87WjiuFvcCSFo/vDKPohchISu6UcqkBs/5oLLcJxR:y7YFvrSFw7uo+U6Ucqkkl
Score
7/10
Malware Config
Signatures
-
ASPack v2.12-2.42 14 IoCs
Detects executables packed with ASPack v2.12-2.42
-
Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
Files
-
1d88915215d7b9db15e1671ec5b46f04
-
51Logon/51Logon.exe
Headers
Sections
-
51Logon/51LogonCAE.dat
-
51Logon/51LogonCE.dat
-
51Logon/51LogonCLE.dat
-
51Logon/51LogonCLP.dat
-
51Logon/51LogonCUE.dat
-
51Logon/51LogonDE.dat
-
51Logon/51LogonPA.dat
-
51Logon/51LogonPE.dat
-
51Logon/dll/51IP.Dat
-
51Logon/dll/IEHelper.dll
Headers
Exports
Sections
-
51Logon/dll/IPImage/touch1.jpg
-
51Logon/dll/IPImage/touch2.jpg
-
51Logon/dll/ImageRes.dll
Headers
Sections
-
51Logon/dll/SoftFrame.dll
Headers
Exports
Sections
-
51Logon/dll/geturl.htm
-
51Logon/dll/msimg32.dll
Headers
Exports
Sections
-
51Logon/dll/softCAL.dll
Headers
Exports
Sections
-
51Logon/dll/softCALMark.dat
-
51Logon/dll/softCWL.dll
Headers
Exports
Sections
-
51Logon/dll/softExt.dll
Headers
Sections
-
51Logon/dll/softFunc.dll
Headers
Exports
Sections
-
51Logon/icon/extend/[PluginCard]1_2.png
-
51Logon/icon/extend/[PluginCard]1_3.png
-
51Logon/icon/extend/[PluginCard]1_4.png
-
51Logon/icon/extend/[PluginCard]1_5.png
-
51Logon/icon/logo/default.png
-
51Logon/icon/logo/拍虎照.gif
-
51Logon/icon/url/alumni.163.com_favicon.ico
-
51Logon/icon/url/alumni.chinaren.com_favicon.ico
-
51Logon/icon/url/auto.sina.com.cn_favicon.ico
-
51Logon/icon/url/baike.baidu.com_favicon.ico
-
51Logon/icon/url/bbs.sina.com.cn_favicon.ico
-
51Logon/icon/url/bbs.tom.com_favicon.ico
-
51Logon/icon/url/blog.sina.com.cn_favicon.ico
-
51Logon/icon/url/club.163.com_favicon.ico
-
51Logon/icon/url/cn.bbs.yahoo.com_favicon.ico
-
51Logon/icon/url/community.csdn.net_favicon.ico
-
51Logon/icon/url/ehire.51job.com_favicon.ico
-
51Logon/icon/url/hi.baidu.com_favicon.ico
-
51Logon/icon/url/iask.sina.com.cn_favicon.ico
-
51Logon/icon/url/login.live.com_favicon.ico
-
51Logon/icon/url/m108.mail.qq.com_favicon.ico
-
51Logon/icon/url/mail.126.com_favicon.ico
-
51Logon/icon/url/mail.163.com_favicon.ico
-
51Logon/icon/url/mail.21cn.com_favicon.ico
-
51Logon/icon/url/mail.cn.yahoo.com_favicon.ico
-
51Logon/icon/url/mail.qq.com_favicon.ico
-
51Logon/icon/url/mail.sina.com.cn_favicon.ico
-
51Logon/icon/url/mail.sohu.com_favicon.ico
-
51Logon/icon/url/member1.taobao.com_favicon.ico
-
51Logon/icon/url/my.51job.com_favicon.ico
-
51Logon/icon/url/passport.baidu.com_favicon.ico
-
51Logon/icon/url/qzone.qq.com_favicon.ico
-
51Logon/icon/url/reg.xiaoyou.qq.com_favicon.ico
-
51Logon/icon/url/vip.163.com_favicon.ico
-
51Logon/icon/url/vip.chinahr.com_favicon.ico
-
51Logon/icon/url/www.126.com_favicon.ico
-
51Logon/icon/url/www.chinaren.com_favicon.ico
-
51Logon/icon/url/www.ctrip.com_favicon.ico
-
51Logon/icon/url/www.google.cn_favicon.ico
-
51Logon/icon/url/www.google.com_favicon.ico
-
51Logon/icon/url/www.sogou.com_favicon.ico
-
51Logon/icon/url/www.xici.net_favicon.ico
-
51Logon/icon/url/www.yeah.net_favicon.ico
-
51Logon/icon/url/www2.baidu.com_favicon.ico
-
51Logon/plugin/51LogonPlugin.dat
-
51Logon/plugin/51LogonPluginList.dat
-
51Logon/plugin/SysShortcut/51LogonCSE.dat
-
51Logon/plugin/SysShortcut/SysShortCut.dll
Headers
Exports
Sections
-
51Logon/plugin/SysShortcut/icon/Control.ico
-
51Logon/plugin/SysShortcut/icon/Dev.ico
-
51Logon/plugin/SysShortcut/icon/Display.ico
-
51Logon/plugin/SysShortcut/icon/Firewall.ico
-
51Logon/plugin/SysShortcut/icon/Internet.ico
-
51Logon/plugin/SysShortcut/icon/MyComputer.ico
-
51Logon/plugin/SysShortcut/icon/Recycled.ico
-
51Logon/plugin/SysShortcut/icon/Setup.ico
-
51Logon/plugin/SysShortcut/icon/Time.ico
-
51Logon/plugin/SysShortcut/icon/Users.ico
-
51Logon/plugin/SysShortcut/icon/calc.ico
-
51Logon/plugin/SysShortcut/icon/compmgmt.ico
-
51Logon/plugin/SysShortcut/icon/lock.ico
-
51Logon/plugin/SysShortcut/icon/msconfig.ico
-
51Logon/plugin/SysShortcut/icon/mspaint.ico
-
51Logon/plugin/SysShortcut/icon/mstsc.ico
-
51Logon/plugin/SysShortcut/icon/network.ico
-
51Logon/plugin/SysShortcut/icon/notepad.ico
-
51Logon/plugin/SysShortcut/icon/print.ico
-
51Logon/plugin/SysShortcut/icon/regedit.ico
-
51Logon/plugin/SysShortcut/icon/services.ico
-
51Logon/plugin/SysShortcut/icon/system.ico
-
51Logon/plugin/SysShortcut/icon/taskmgr.ico
-
51Logon/plugin/image/sg.png
-
51Logon/plugin/image/shortcut.png
-
51Logon/plugin/sg/SGDirect.dll
Headers
Exports
Sections
-
51Logon/recommend/51LogonRecommend.dat
-
51Logon/recommend/Dll/Baidu.dll
Headers
Exports
Sections
-
51Logon/recommend/Dll/LogonBBS.dll
Headers
Exports
Sections
-
51Logon/recommend/Dll/LogonFlash.dll
Headers
Exports
Sections
-
51Logon/recommend/Icon/51Logon.png
-
51Logon/recommend/Icon/51LogonFlash.png
-
51Logon/recommend/Icon/baidu.png
-
51Logon/recommend/Icon/sgrefer.png
-
51Logon/skin/Skin1/CtrlSkin.dat
-
51Logon/skin/Skin1/MainSkin.dat
-
51Logon/skin/Skin1/MenuSkin.dat
-
51Logon/skin/Skin1/Skin.cfg
-
51Logon/skin/Skin1/Skin.png
-
51Logon/skin/Skin2/CtrlSkin.dat
-
51Logon/skin/Skin2/MainSkin.dat
-
51Logon/skin/Skin2/MenuSkin.dat
-
51Logon/skin/Skin2/Skin.cfg
-
51Logon/skin/Skin2/Skin.png