General

  • Target

    1fc97581526d751de85076422694c06e

  • Size

    1.7MB

  • MD5

    1fc97581526d751de85076422694c06e

  • SHA1

    50e4c3b60a76b7037fa8b8cadf7a6d0e25db1227

  • SHA256

    cbe5cdf7ad6e2c7b436b15be3f500205a5d62d9fe07f7744171a19e1486a176f

  • SHA512

    c904093976e919cb0437af0e5407f6647695531ef1e5a67229a194fc5ec4fb923d321c6ac1a81370fc446d890181423462868e0fc823a996a0eeecd6dae5c09a

  • SSDEEP

    49152:8/hGaChuwNoLdGHtp8VmFPhhriezZmwKkexMvd0qJG+1:85WhnNmwHt6C+oZxK5iKq8+1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fc97581526d751de85076422694c06e
    .rar
  • SETUP.LST
  • ipaforenglish.CAB
    .cab
  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • GAPI32.DLL
    .dll windows:4 windows x86 arch:x86

    624c84a04948cdb010eaf9695c0efffd


    Headers

    Imports

    Exports

    Sections

  • RCHTXCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • RICHED32.DLL
    .dll windows:4 windows x86 arch:x86

    32c903521d208fd36af5670d0a38a2b9


    Headers

    Imports

    Sections

  • RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    f879ec87b93340bacfa917edf4e1aee5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • asycfilt.dll
    .dll windows:4 windows x86 arch:x86

    164fffc4db6ca0aaef243987761b38b0


    Headers

    Imports

    Exports

    Sections

  • comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • help.htm
    .html
  • ipaforenglish.exe
    .exe windows:4 windows x86 arch:x86

    6dab00e5a61af35ab01acd2ea1d96e8d


    Headers

    Imports

    Sections

  • msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3a9d8d9e790b12f936ea4ece1b2d93b4


    Headers

    Imports

    Exports

    Sections

  • oleaut32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6d6ba14d07c104659535aae1aef1ff80


    Headers

    Imports

    Exports

    Sections

  • olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5c24f9b3720fc0ae25a865a15ca714f2


    Headers

    Imports

    Exports

    Sections

  • stdole2.tlb
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • vb6chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot