Overview

overview

7

Static

static

7

Skin.dll

windows7-x64

7

Skin.dll

windows10-2004-x64

7

办公室�....3.exe

windows7-x64

7

办公室�....3.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cf9ca4f7cab7fca3d0838ec94f8846a

  • Size

    1.6MB

  • MD5

    0cf9ca4f7cab7fca3d0838ec94f8846a

  • SHA1

    fc192490c526237ab8687416a0f76c2fbd2bfbc4

  • SHA256

    fa3663cb64ae207ef0baf6310c2aee5ae622121985c4ba994add8a0697a1b198

  • SHA512

    5e816afdcaaef4cff69862fc085323cf8a89ee81054388ae04ae167abbd493218ff15d790d5c67be5a97e7d0f2bd92e9c91a7030198caa9a275845b772b6c30b

  • SSDEEP

    49152:k+OgdhcwJ8wcPt3RXKVTQWoY7eSQNWZaj:k+OgDJC13ZwTjl70A6

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cf9ca4f7cab7fca3d0838ec94f8846a
    .rar
  • Skin.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 办公室游戏助手v2.3.exe
    .exe windows:5 windows x86 arch:x86

    16b34e20693f4ef7a3b34d97abdd00ab


    Headers

    Imports

    Sections

  • 新云软件.url
    .url