General

  • Target

    0ecf6bf1518ed6beb32bd84e5082a480

  • Size

    392KB

  • MD5

    0ecf6bf1518ed6beb32bd84e5082a480

  • SHA1

    d5942161455baf7d47c8fa85bc69f81168c306a7

  • SHA256

    9c28ff939def134d68e9e09d5010433b036557718cb19e319c8d0813ea99fdc0

  • SHA512

    9b78bd8e53a263ad4ab45904b2ff4c339da474fc3067ac686552b4e5804e098e78ffbd1d2c9f7425df43087e4bb890c61196e0183220c47f5d6a4ebe84ffe868

  • SSDEEP

    6144:sks05DPJQ2FpO9Ud5J6FyanIAizw7NMKs3EgPkQmvuW44h8BNoKEQFzR44CTIjXJ:sD0mgP6yaIiNm3EgsQhW5wpFzxAIj35

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ecf6bf1518ed6beb32bd84e5082a480
    .rar
  • DDZ2.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQ火拼斗地主助手破解版.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot