General

  • Target

    1a9b721e53669edb7f8897b9e40f8bb8

  • Size

    2.5MB

  • MD5

    1a9b721e53669edb7f8897b9e40f8bb8

  • SHA1

    a2ef2768720d06c8206576847101c7a11f8bfd23

  • SHA256

    56921843b5aa3ca1c6c231ef1bee879a0c3d19f2e3ce5c8acab07151825f2bd3

  • SHA512

    81c18bc66831d6ed354fe3c45b965548a6bbfe25179d71530cad319c0537196d9860a4b4501717edeeaa8dd38fd029c22167094941e3a63cae3b19fcbbce73f2

  • SSDEEP

    49152:qQpjHMbrA+sSsVkyaVo5Z8GqH2TwJ3uxF9cUmmH28ZAa7dIkPAbbYJ:3HMb8dSsUUZ8llpScRm5bPAC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a9b721e53669edb7f8897b9e40f8bb8
    .rar
  • gexgg_-10-502/通用的逐鹿中原登陆器配置器/ServerList.txt
  • gexgg_-10-502/通用的逐鹿中原登陆器配置器/服务端插件/PlugList.txt
  • gexgg_-10-502/通用的逐鹿中原登陆器配置器/服务端插件/yinling.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • gexgg_-10-502/通用的逐鹿中原登陆器配置器/软件说明.txt
  • gexgg_-10-502/通用的逐鹿中原登陆器配置器/逐鹿中原登陆器配置器.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections