General

  • Target

    0ca8e5a71178d959452ac0b8fcf0fbb8

  • Size

    9.2MB

  • MD5

    0ca8e5a71178d959452ac0b8fcf0fbb8

  • SHA1

    1ffbe49f9c938caee4d396229773e9c12bff091c

  • SHA256

    8423ee80bc9fc55317af957248585201d4019e7fff2d55a90a3775080b873db1

  • SHA512

    db35b0d92d799bec6e8c718ce707a78e3c5076c279f7fe7d9414e278adb43c86b20d3cfa1920c39221afad6c68ecef461e6a70472efb08d72c0e1fd78bf89b22

  • SSDEEP

    196608:Bz/Vjtf8snluzivujbqLuy/q8cuL9saFnu9Ocu6I2JhRLmIPGLkRxMbrgv2:lVjZ8slIKu6uIBcuL9s4uW6pTjPG2ebn

Score
3/10

Malware Config

Signatures

  • Unsigned PE 74 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ca8e5a71178d959452ac0b8fcf0fbb8
    .rar
  • 3.70logo/AGPPack/AGP/current/WIN2000/sisagp.cat
  • 3.70logo/AGPPack/AGP/current/WIN2000/sisagp.inf
  • 3.70logo/AGPPack/AGP/current/WIN2000/sisagpx.sys
    .sys windows:5 windows x86 arch:x86

    9459d107d88ba764cb3168b1d82d3d31


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/AGP/current/WIN2003/sisagp.cat
  • 3.70logo/AGPPack/AGP/current/WIN2003/sisagp.inf
  • 3.70logo/AGPPack/AGP/current/WIN2003/sisagpx.sys
    .sys windows:5 windows x86 arch:x86

    5df364326d1894d23debfea361d6fcb7


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/AGP/current/WIN64/sisagp.cat
  • 3.70logo/AGPPack/AGP/current/WIN64/sisagp.inf
  • 3.70logo/AGPPack/AGP/current/WIN64/sisagpx.sys
    .sys windows:5 windows x64 arch:x64

    f55f17e06442965c4a19c432d5d5be95


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/AGP/current/WIN98/SISAGP.PCI
    .dll windows:4 windows x86 arch:x86

    3882f1ac966f9eac1a7a7c99564ba42a


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/AGP/current/WIN98/sisagp.cat
  • 3.70logo/AGPPack/AGP/current/WIN98/sisagp.inf
  • 3.70logo/AGPPack/AGP/current/WINME/SISAGP.PCI
    .dll windows:4 windows x86 arch:x86

    3882f1ac966f9eac1a7a7c99564ba42a


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/AGP/current/WINME/sisagp.cat
  • 3.70logo/AGPPack/AGP/current/WINME/sisagp.inf
  • 3.70logo/AGPPack/AGP/current/WINXP/sisagp.cat
  • 3.70logo/AGPPack/AGP/current/WINXP/sisagp.inf
  • 3.70logo/AGPPack/AGP/current/WINXP/sisagpx.sys
    .sys windows:5 windows x86 arch:x86

    b079da3437783c3908b125ed3494e4e9


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/AGP/old/WIN2000/sisagp.cat
  • 3.70logo/AGPPack/AGP/old/WIN2000/sisagp.inf
  • 3.70logo/AGPPack/AGP/old/WIN2000/sisagpx.sys
    .sys windows:5 windows x86 arch:x86

    db7cd18cb0f14c3e0119b63155010932


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/AGP/old/WIN98/SISAGP.pci
    .dll windows:4 windows x86 arch:x86

    3882f1ac966f9eac1a7a7c99564ba42a


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/AGP/old/WIN98/sisagp.cat
  • 3.70logo/AGPPack/AGP/old/WIN98/sisagp.inf
  • 3.70logo/AGPPack/AGP/old/WINME/SISAGP.pci
    .dll windows:4 windows x86 arch:x86

    3882f1ac966f9eac1a7a7c99564ba42a


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/AGP/old/WINME/sisagp.cat
  • 3.70logo/AGPPack/AGP/old/WINME/sisagp.inf
  • 3.70logo/AGPPack/AGP/old/WINXP/sisagp.cat
  • 3.70logo/AGPPack/AGP/old/WINXP/sisagp.inf
  • 3.70logo/AGPPack/AGP/old/WINXP/sisagpx.sys
    .sys windows:5 windows x86 arch:x86

    bdaae44a73d7e93706495d03522c4f72


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/AGP/sisuagp/WIN32/sisuagp.cat
  • 3.70logo/AGPPack/AGP/sisuagp/WIN32/sisuagp.inf
  • 3.70logo/AGPPack/AGP/sisuagp/WIN64/sisuagp.cat
  • 3.70logo/AGPPack/AGP/sisuagp/WIN64/sisuagp.inf
  • 3.70logo/AGPPack/README.TXT
  • 3.70logo/AGPPack/SISfiles/AGPFunc.dll
    .dll windows:5 windows x86 arch:x86

    2cd0b6ebe91f47c311c6a9bdcff845e8


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/SISfiles/AMDInst.exe
    .exe windows:6 windows x64 arch:x64

    cb9e60ba2a1a318bd504142b0d94cc51


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/SISfiles/SISAGP98.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 3.70logo/AGPPack/SISfiles/ata133ap.exe
    .exe windows:4 windows x86 arch:x86

    34bdc43108480d5a3a68910caa27ec37


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/SISfiles/instdrv.exe
    .exe windows:4 windows x86 arch:x86

    8e5153ece6fe163dff0507b952b348d9


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/SISfiles/waitwnd.exe
    .exe windows:4 windows x86 arch:x86

    04b4ddfc7d49be0a82edd16a14b86d9b


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/USB/Win2K_XP/WinXPUSB/SISPORT.SYS
    .sys windows:5 windows x86 arch:x86

    0c90b080851dbc2904b4aefece948e72


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/USB/Win2K_XP/WinXPUSB/SIS_LIB.DLL
    .dll windows:4 windows x86 arch:x86

    37bdeb25f0422825ea22d8550129c32e


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/USB/Win2K_XP/WinXPUSB/SiSUSBrg.exe
    .exe windows:4 windows x86 arch:x86

    72f59db26f24f87b0f54ce671b8f5c2c


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/USB/Win9x/SiSFiles/Mp_s3.exe
    .exe windows:4 windows x86 arch:x86

    587eae0f315e3a6f6a2281c204ffa147


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/USB/Win9x/SiSFiles/Openhci.sys
    .sys windows:4 windows x86 arch:x86

    491c67fe6811f912d8e5ac2bd0e01c7f


    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/data1.cab
  • 3.70logo/AGPPack/data1.hdr
  • 3.70logo/AGPPack/data2.cab
  • 3.70logo/AGPPack/engine32.cab
    .cab
  • DotNetInstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • IScript.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    01079e578402fb3b7165570d3ad44913


    Headers

    Imports

    Exports

    Sections

  • IUser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ed67065e5e9b57547897a7e97c585c27


    Headers

    Imports

    Exports

    Sections

  • IsProBE9x.tlb
  • IsProBENT.tlb
  • ctor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    66e125b3db52dda3a29db9e25cbdb706


    Headers

    Imports

    Exports

    Sections

  • iKernel.rgs
  • ikernel.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4388eae753019d8a9b20cf9b64adc7d4


    Headers

    Imports

    Exports

    Sections

  • objectps.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a946c4bf5da14af630ebc8e61f6454ef


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/AGPPack/layout.bin
  • 3.70logo/AGPPack/setup-s.bat
  • 3.70logo/AGPPack/setup.boot
  • 3.70logo/AGPPack/setup.exe
    .exe windows:4 windows x86 arch:x86

    5523dda9a438aa3992e03f3746f19bf6


    Code Sign

    Headers

    Imports

    Sections

  • 3.70logo/AGPPack/setup.ini
  • 3.70logo/AGPPack/setup.inx
  • 3.70logo/AGPPack/setup.iss
  • 3.70logo/Language/0006.lng
  • 3.70logo/Language/0007.lng
  • 3.70logo/Language/0009.lng
  • 3.70logo/Language/000a.lng
  • 3.70logo/Language/000b.lng
  • 3.70logo/Language/0010.lng
  • 3.70logo/Language/0011.lng
  • 3.70logo/Language/0012.lng
  • 3.70logo/Language/0013.lng
  • 3.70logo/Language/0014.lng
  • 3.70logo/Language/0019.lng
  • 3.70logo/Language/001d.lng
  • 3.70logo/Language/001e.lng
  • 3.70logo/Language/0404.lng
  • 3.70logo/Language/040c.lng
  • 3.70logo/Language/0416.lng
  • 3.70logo/Language/0804.lng
  • 3.70logo/Language/0816.lng
  • 3.70logo/Language/0c0c.lng
  • 3.70logo/NT4/sisgr.inf
  • 3.70logo/NT4/sisgrp.sys
    .sys windows:4 windows x86 arch:x86

    67dc9c6f26ef1ff4b452f97d5669675d


    Headers

    Imports

    Sections

  • 3.70logo/NT4/sisgrv.dll
    .dll windows:4 windows x86 arch:x86

    279656a325588fd4f6d6f18ab981fbbd


    Headers

    Imports

    Sections

  • 3.70logo/ReadMe.txt
  • 3.70logo/SETUPRES/Setup.bmp
  • 3.70logo/SETUPRES/Setup16.bmp
  • 3.70logo/SETUPRES/title.bmp
  • 3.70logo/Setup.ini
  • 3.70logo/Setup.iss
  • 3.70logo/UtilRes/3DWizard/sisut3d.dll
    .dll windows:4 windows x86 arch:x86

    dee0a1b325f13d078c05abf7081f2e9d


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/UtilRes/Gamma/gamma.bmp
  • 3.70logo/UtilRes/General/Bk31x.bmp
  • 3.70logo/UtilRes/General/logo.bmp
  • 3.70logo/UtilRes/ICO/UNINS.ico
  • 3.70logo/UtilRes/ICO/XRotate.ico
  • 3.70logo/UtilRes/ICO/trayicon.ico
  • 3.70logo/UtilRes/Info/650.bmp
  • 3.70logo/UtilRes/Info/651.bmp
  • 3.70logo/UtilRes/Info/740.bmp
  • 3.70logo/UtilRes/Info/mirage.bmp
  • 3.70logo/UtilRes/Manager/SIS3D.AVI
  • 3.70logo/UtilRes/Manager/SISDM.AVI
  • 3.70logo/UtilRes/Manager/SISGAMMA.AVI
  • 3.70logo/UtilRes/Manager/SISINFO.AVI
  • 3.70logo/UtilRes/Manager/SISTV.AVI
  • 3.70logo/UtilRes/Manager/SISTVLCD.AVI
  • 3.70logo/UtilRes/Manager/SISVIDEO.AVI
  • 3.70logo/UtilRes/Sistray/traylogo.bmp
  • 3.70logo/UtilRes/Video/overlay1.bmp
  • 3.70logo/Win98_ME/SiSBase.dll
    .dll windows:4 windows x86 arch:x86

    da02aae10c18eb5b4f050dda9024707c


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/Win98_ME/SiSInst.dll
    .dll windows:4 windows x86 arch:x86

    83c3d6b1fe41752231a3c3c649e2fa2e


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/Win98_ME/SiSPInst.dll
    .dll windows:4 windows x86 arch:x86

    939c493d47652ac94d7b9ffbd8e22a95


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/Win98_ME/SiSParse.dll
    .dll windows:4 windows x86 arch:x86

    0e77a549ae4ccddcfbdae7dedfeae121


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/Win98_ME/oemrom.bin
  • 3.70logo/Win98_ME/sisdx.dll
  • 3.70logo/Win98_ME/sisdx32.dll
    .dll windows:4 windows x86 arch:x86

    efad6ef7017aceb34dc1ef62778304c4


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/Win98_ME/sisgl.dll
    .dll windows:5 windows x86 arch:x86

    7d7c95ea823ebc103804b5e065eaa90d


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/Win98_ME/sisgr.cat
  • 3.70logo/Win98_ME/sisgr.drv
  • 3.70logo/Win98_ME/sisgr.inf
  • 3.70logo/Win98_ME/sisgr.vxd
  • 3.70logo/WinXP64/InstFunc.dll
    .dll windows:5 windows x64 arch:x64

    bd321f492649515fb99f156fd06cf48b


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/InstFunc.exe
    .exe windows:4 windows x64 arch:x64

    c74bdbb100ccbd1cf3dc19896bf09c60


    Headers

    Imports

    Sections

  • 3.70logo/WinXP64/SiSBase.dll
    .dll windows:4 windows x86 arch:x86

    da02aae10c18eb5b4f050dda9024707c


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/SiSInst.dll
    .dll windows:4 windows x86 arch:x86

    83c3d6b1fe41752231a3c3c649e2fa2e


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/SiSPInst.dll
    .dll windows:4 windows x64 arch:x64

    6c6b5b8d56675b3658278c21c078656d


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/SiSParse.dll
    .dll windows:4 windows x86 arch:x86

    0e77a549ae4ccddcfbdae7dedfeae121


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/SiSPower.dll
    .dll windows:4 windows x64 arch:x64

    d0057be94dc80c7246605b57131e84c2


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/sis660.bin
  • 3.70logo/WinXP64/sis760.bin
  • 3.70logo/WinXP64/sisgl.dll
    .dll windows:5 windows x86 arch:x86

    f87022b294acf71be3067049dfa452af


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/sisgr.cat
  • 3.70logo/WinXP64/sisgr.inf
  • 3.70logo/WinXP64/sisgrp.sys
    .sys windows:5 windows x64 arch:x64

    e296586cfda5b649b63f18bccf6bff16


    Headers

    Imports

    Sections

  • 3.70logo/WinXP64/sisgrv.dll
    .dll windows:5 windows x64 arch:x64

    e48460ed1b2bdac40866f8760c81eb23


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/sisumgr.dll
    .dll regsvr32 windows:4 windows x64 arch:x64

    fe00c327f3dcbfc973cc74206fa8f498


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP64/srvkp.sys
    .sys windows:5 windows x64 arch:x64

    5498dc415fe9b7e0f3cd48fa11f31061


    Headers

    Imports

    Sections

  • 3.70logo/WinXP_2K/InstFunc.dll
    .dll windows:5 windows x86 arch:x86

    ce34cf75b20f93f9c0276995ccb2fecb


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/InstFunc.exe
    .exe windows:4 windows x86 arch:x86

    b8dfd1a1b97d3829f7b3c8fc2a3763c9


    Headers

    Imports

    Sections

  • 3.70logo/WinXP_2K/SiSBase.dll
    .dll windows:4 windows x86 arch:x86

    da02aae10c18eb5b4f050dda9024707c


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/SiSInst.dll
    .dll windows:4 windows x86 arch:x86

    83c3d6b1fe41752231a3c3c649e2fa2e


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/SiSPInst.dll
    .dll windows:4 windows x86 arch:x86

    939c493d47652ac94d7b9ffbd8e22a95


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/SiSParse.dll
    .dll windows:4 windows x86 arch:x86

    0e77a549ae4ccddcfbdae7dedfeae121


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/SiSPower.dll
    .dll windows:4 windows x86 arch:x86

    c5536a2560d504f9f530985ef1841925


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/sis650.bin
  • 3.70logo/WinXP_2K/sis660.bin
  • 3.70logo/WinXP_2K/sis740.bin
  • 3.70logo/WinXP_2K/sis741.bin
  • 3.70logo/WinXP_2K/sis760.bin
  • 3.70logo/WinXP_2K/sisgl.dll
    .dll windows:5 windows x86 arch:x86

    f87022b294acf71be3067049dfa452af


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/sisgr.cat
  • 3.70logo/WinXP_2K/sisgr.inf
  • 3.70logo/WinXP_2K/sisgrp.sys
    .sys windows:5 windows x86 arch:x86

    f1a9a3cdeffedba9545a8d31e4c37246


    Headers

    Imports

    Sections

  • 3.70logo/WinXP_2K/sisgrv.dll
    .dll windows:5 windows x86 arch:x86

    774223760d824674009671044cda3afa


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/WinXP_2K/srvkp.sys
    .sys windows:5 windows x86 arch:x86

    0e275289c9b9af7d478b5a707b578df8


    Headers

    Imports

    Sections

  • 3.70logo/data1.cab
  • 3.70logo/data1.hdr
  • 3.70logo/data2.cab
  • 3.70logo/engine32.cab
    .cab
  • DotNetInstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • IScript.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    01079e578402fb3b7165570d3ad44913


    Headers

    Imports

    Exports

    Sections

  • IUser.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ed67065e5e9b57547897a7e97c585c27


    Headers

    Imports

    Exports

    Sections

  • IsProBE9x.tlb
  • IsProBENT.tlb
  • ctor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    66e125b3db52dda3a29db9e25cbdb706


    Headers

    Imports

    Exports

    Sections

  • iKernel.rgs
  • ikernel.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4388eae753019d8a9b20cf9b64adc7d4


    Headers

    Imports

    Exports

    Sections

  • objectps.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a946c4bf5da14af630ebc8e61f6454ef


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/layout.bin
  • 3.70logo/setup.boot
  • 3.70logo/setup.exe
    .exe windows:4 windows x86 arch:x86

    5523dda9a438aa3992e03f3746f19bf6


    Code Sign

    Headers

    Imports

    Sections

  • 3.70logo/setup.inx
  • 3.70logo/setupDLL/Instdrv.exe
    .exe windows:4 windows x86 arch:x86

    8e5153ece6fe163dff0507b952b348d9


    Headers

    Imports

    Sections

  • 3.70logo/setupDLL/IsUninst.exe
    .exe windows:4 windows x86 arch:x86

    03557481bc3b99c7677b9a5bc55cb9e1


    Headers

    Imports

    Sections

  • 3.70logo/setupDLL/Progress.exe
    .exe windows:4 windows x86 arch:x86

    38526c950e713bca7ad5b804c8ca104c


    Headers

    Imports

    Sections

  • 3.70logo/setupDLL/waitwnd.exe
    .exe windows:4 windows x86 arch:x86

    6aeb99af2a69e6665d2399043c61aadf


    Headers

    Imports

    Sections

  • 3.70logo/utilDLL/9xBin/315/oemrom.bin
  • 3.70logo/utilDLL/9xBin/Xabre/oemrom.bin
  • 3.70logo/utilDLL/LCDMode.exe
    .exe windows:4 windows x86 arch:x86

    c59539b07473fe864617e7275df900a4


    Headers

    Imports

    Sections

  • 3.70logo/utilDLL/SiSApCom.dll
    .dll windows:4 windows x86 arch:x86

    c5c1426eed2207ba1f6f0fca1e1e51b3


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/utilDLL/SiSHook.dll
    .dll windows:4 windows x86 arch:x86

    8eac6d8c7101fc57434a7b686f136801


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/utilDLL/TVMode.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    09390d11f0e673c2740f0eb3064a6a09


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/utilDLL/ntBin/sis315.bin
  • 3.70logo/utilDLL/ntBin/xabre.bin
  • 3.70logo/utilDLL/sislib.dll
    .dll windows:4 windows x86 arch:x86

    132ea077a0eca5abd3633581b21f1d60


    Headers

    Imports

    Exports

    Sections

  • 3.70logo/utilDLL/sislib.ini
  • 3.70logo/utilDLL/sisvb.dll
  • 3.70logo/安装说明.txt
  • 3.70logo/非常世纪资源网.url
    .url