General

  • Target

    1652276d6114a839e8cb738f889cd7b4

  • Size

    26.4MB

  • MD5

    1652276d6114a839e8cb738f889cd7b4

  • SHA1

    c10a05aa3aa6fb20b4edec441424e547f977bb9e

  • SHA256

    0ac32d7636121e7147ba6d4dc165d96b5b382bacefe8a7d1d713f7d19d1f1cf5

  • SHA512

    fafc01dd87ad9d03ff77b8eb65864dcf05ef96a02ffb2a0b2717631f3646471cb4e42afe8f65ea9d5f7543c5d9ac99e6fb4d25386a1acde6eb28b86079674faf

  • SSDEEP

    786432:96y8EffpwUaybde9r182N0UOtUZkYypaRIo6:96y8EfBw5p9J/r83+RIo6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 62 IoCs

    Checks for missing Authenticode signature.

Files

  • 1652276d6114a839e8cb738f889cd7b4
    .rar
  • 下载说明.htm
    .html .js polyglot
  • 汇能医院检验管理系统2005版/Hospital_oNLY.CAB
    .cab
  • ADODCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    390ef37875e351d87137c1d1bddb9a0a


    Headers

    Imports

    Exports

    Sections

  • Actbar2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e059facbda6a0cff185ded2cea7d4f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • Comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EXCEL9.OLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Hospital_oNLY.exe
    .exe windows:4 windows x86 arch:x86

    6e244ebabfa07a6ced838f39c28801f0


    Headers

    Imports

    Sections

  • INETCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MDAC_TYP.EXE
    .exe windows:5 windows x86 arch:x86

    b83464d8132ecd9f810820e192566e15


    Code Sign

    Headers

    Imports

    Sections

  • MSADODC.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    8e793d5ee63851225d4d05cc91524988


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSBIND.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    00fd696c4583db421396d2e953eef73b


    Headers

    Imports

    Exports

    Sections

  • MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    b22bd7d6f2b83c193c4c7e9c0a2de8b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Resize32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    4de2c94ac40b66e491adc18bc34268ce


    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDFTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TABCTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • actrpt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ddd71a26be05566072b7b123b79db05e


    Headers

    Imports

    Exports

    Sections

  • ardesign.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e8d7e76a68a2dda51f746709bf2f595c


    Headers

    Imports

    Exports

    Sections

  • arviewer.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    44eeb2d745d78a743cbbf5fd198be420


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data_link.mdb
  • msado20.tlb
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • mscomct2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msstdfmt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    813db3b6c9a1b45c2a363924917c26d9


    Headers

    Imports

    Exports

    Sections

  • msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • oleaut32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    063e6818ead8c9972b817432b9990989


    Headers

    Imports

    Exports

    Sections

  • olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5ccf8bf224eb9ec83fbb805c335d308


    Headers

    Imports

    Exports

    Sections

  • stdole2.tlb
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • tdbg6.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    eac66bb84042a6770e4900400e95f2b2


    Headers

    Imports

    Exports

    Sections

  • tdbgpp.dll
    .dll windows:4 windows x86 arch:x86

    b8016df1c509aa9a434f04549d4a6e02


    Headers

    Imports

    Exports

    Sections

  • todg6.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1a729702e60a711fbdfc8bc5991f05c


    Headers

    Imports

    Exports

    Sections

  • todgub6.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    47c5e65a677b9b2065ab112695589a4f


    Headers

    Imports

    Exports

    Sections

  • xpbutton.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ea9b3e4bb696b1ea15f2a9989525d3f6


    Headers

    Imports

    Exports

    Sections

  • ��ҽԺ��������ϵͳ��˵����.doc
    .doc windows office2003
  • 汇能医院检验管理系统2005版/SETUP.LST
  • 汇能医院检验管理系统2005版/Support/ADODCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    390ef37875e351d87137c1d1bddb9a0a


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/Actbar2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e059facbda6a0cff185ded2cea7d4f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/Comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/EXCEL9.OLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/Hospital_oNLY.BAT
  • 汇能医院检验管理系统2005版/Support/Hospital_oNLY.exe
    .exe windows:4 windows x86 arch:x86

    6e244ebabfa07a6ced838f39c28801f0


    Headers

    Imports

    Sections

  • 汇能医院检验管理系统2005版/Support/INETCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/MDAC_TYP.EXE
    .exe windows:5 windows x86 arch:x86

    b83464d8132ecd9f810820e192566e15


    Code Sign

    Headers

    Imports

    Sections

  • 汇能医院检验管理系统2005版/Support/MSADODC.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    8e793d5ee63851225d4d05cc91524988


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/MSBIND.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    00fd696c4583db421396d2e953eef73b


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/Mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    b22bd7d6f2b83c193c4c7e9c0a2de8b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/Resize32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    4de2c94ac40b66e491adc18bc34268ce


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/SETUP.EXE
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • 汇能医院检验管理系统2005版/Support/SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • 汇能医院检验管理系统2005版/Support/ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • 汇能医院检验管理系统2005版/Support/STDFTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/Setup.Lst
  • 汇能医院检验管理系统2005版/Support/TABCTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/actrpt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ddd71a26be05566072b7b123b79db05e


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/ardesign.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e8d7e76a68a2dda51f746709bf2f595c


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/arviewer.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    44eeb2d745d78a743cbbf5fd198be420


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/data_link.mdb
  • 汇能医院检验管理系统2005版/Support/hospital.DDF
  • 汇能医院检验管理系统2005版/Support/msado20.tlb
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/mscomct2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/msstdfmt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    813db3b6c9a1b45c2a363924917c26d9


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/oleaut32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    063e6818ead8c9972b817432b9990989


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5ccf8bf224eb9ec83fbb805c335d308


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/stdole2.tlb
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 汇能医院检验管理系统2005版/Support/tdbg6.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    eac66bb84042a6770e4900400e95f2b2


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/tdbgpp.dll
    .dll windows:4 windows x86 arch:x86

    b8016df1c509aa9a434f04549d4a6e02


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/todg6.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    b1a729702e60a711fbdfc8bc5991f05c


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/todgub6.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    47c5e65a677b9b2065ab112695589a4f


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/xpbutton.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ea9b3e4bb696b1ea15f2a9989525d3f6


    Headers

    Imports

    Exports

    Sections

  • 汇能医院检验管理系统2005版/Support/《医院化验管理系统》说明书.doc
    .doc windows office2003
  • 汇能医院检验管理系统2005版/setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • 汇能医院检验管理系统2005版/下载说明.htm
    .html .js polyglot
  • 汇能医院检验管理系统2005版/再版说明.txt