General

  • Target

    0f720a369316e2a997192ac826fe7fa9

  • Size

    1.1MB

  • MD5

    0f720a369316e2a997192ac826fe7fa9

  • SHA1

    34bb59c6c581936aee379f4a5dc8b9841fda7451

  • SHA256

    246c802a5278a845589774036ca2818ce0d7b2651f9a1fc5d267232e61b83397

  • SHA512

    1130090efc728be75adab7f65ba18ee5187195deed4ea74a7cc4207acdf828641a019b060dcb67fc23cbc59b51d43266ca234f4d9dc904555e37a5b3c3498ce7

  • SSDEEP

    24576:8EWgXv2uuUmiimxD8CKulM6Mdadc86NpkX4eE8uIAhtLtb:CgeuufnolMfQc8ymfAhtLtb

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f720a369316e2a997192ac826fe7fa9
    .rar
  • QQ华夏神秘卦助手0502/QQ华夏神秘卦助手.exe
    .exe windows:4 windows x86 arch:x86

    f8192a454a213f0ff13db07d29c84b43


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    3d5f56d94d940d17985002ac8d7d1179


    Code Sign

    Headers

    Imports

    Sections

  • QQ华夏神秘卦助手0502/plugin/COLOR.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5af5c5264adbdf9a8ed6ba3a9dc39011


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/FILE.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a10a0592e6925a16bb3205010b141edd


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/FILE.ini
  • QQ华夏神秘卦助手0502/plugin/MEDIA.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    ad4a40c665cadb0f107e26d05c0debd6


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/MSG.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    57aad26ca686d6b6792d67b488197bb4


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/PIC.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9d837035acaae8b82110cf620a038f18


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/RFNO.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ华夏神秘卦助手0502/plugin/SYS.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8942c3e9159ff5e44b99b3b05f222dbe


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/WEB.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    3bda4e16faafbd5c4a3fdaf434f98b0a


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/WINDOW.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    893c7528170b94ff6bcdcb8bb8bf6e0d


    Headers

    Imports

    Exports

    Sections

  • QQ华夏神秘卦助手0502/plugin/WINDOW.ini
  • QQ华夏神秘卦助手0502/uservar.ini
  • QQ华夏神秘卦助手0502/看不到界面的说明.txt