Overview

overview

3

Static

static

3

网吧维�...nu.dll

windows7-x64

1

网吧维�...nu.dll

windows10-2004-x64

1

网吧维�...PI.dll

windows7-x64

1

网吧维�...PI.dll

windows10-2004-x64

1

网吧维�...xt.dll

windows7-x64

1

网吧维�...xt.dll

windows10-2004-x64

1

网吧维�...32.dll

windows7-x64

1

网吧维�...32.dll

windows10-2004-x64

1

网吧维�...ln.dll

windows7-x64

1

网吧维�...ln.dll

windows10-2004-x64

1

网吧维�...mp.dll

windows7-x64

1

网吧维�...mp.dll

windows10-2004-x64

1

网吧维�...ib.dll

windows7-x64

1

网吧维�...ib.dll

windows10-2004-x64

1

网吧维�...��.url

windows7-x64

1

网吧维�...��.url

windows10-2004-x64

1

网吧维�....0.exe

windows7-x64

1

网吧维�....0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    20245d75be1650225cd363061ace9116

  • Size

    2.7MB

  • MD5

    20245d75be1650225cd363061ace9116

  • SHA1

    4240384c9aeffde22b66d623bd152f944f2a2504

  • SHA256

    605f69e1493c6aecc5e9d2ac6a865c02bd5166a6331826d8a75a429630885640

  • SHA512

    4eafe5a9cbe83b12019980653fa65d5c3ab7853317ea4a1c082ac0e5aa5fe0617103ddb96536b14f47e52c4165b693eb3a2bc37990bc48a4e8f7c3d7502eb98d

  • SSDEEP

    49152:EQc+Tb5kneA5ohYctJkoKBBmlkl400cNNJ61Nj7yxC00NRQAfqErUYeBt4bID15k:TFP5knshYkY4lV00l9OY7LAYeBOb65k

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 20245d75be1650225cd363061ace9116
    .rar
  • 网吧维护工具1.3.0.0/ExtMenu.fnr
    .dll windows:4 windows x86 arch:x86

    472b95d04dba8e53958d2b826a76dce5


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    427eb39584a9f7cdf9555afee9d5ccff


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/kernel32.dll
    .dll windows:5 windows x86 arch:x86

    437d147ea3f4a34fff9ac2110441696a


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/wmp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    5b973eca8bad8c14115293a5ead972c0


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/xplib.fne
    .dll windows:4 windows x86 arch:x86

    5e2fcf33441c14bc092dd01eb382372b


    Headers

    Imports

    Exports

    Sections

  • 网吧维护工具1.3.0.0/减少开机滚动条滚动次数.reg
  • 网吧维护工具1.3.0.0/新云软件.url
    .url
  • 网吧维护工具1.3.0.0/网吧维护工具1.3.0.0.exe
    .exe .vbs windows:4 windows x86 arch:x86 polyglot

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 网吧维护工具1.3.0.0/说明.txt