General

  • Target

    1bd4b963140bf3956fdc35a82b95ea78

  • Size

    5.4MB

  • MD5

    1bd4b963140bf3956fdc35a82b95ea78

  • SHA1

    9f513b0e43d40e36c1990ff88e09125564fcb58a

  • SHA256

    2d0f02b7af1437516835736e0456e621dbe4d9ed35562ee1d14c51e515c6b935

  • SHA512

    d4d418bcd0dbfe732b9347e410854e0ff03207f0bab28beb133b3832b2c6a9569c6d904f2631169390a859b424fbeb6afdf1f9616755da972d8e82415e9a27c0

  • SSDEEP

    98304:7Vj4xh1UopLCOnBlQjRPhuQW5pBo0cqUXY44mV8Mer7mLxgGuQv24:xO19Gij61U3Bo0PUPqiLOM/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 41 IoCs

    Checks for missing Authenticode signature.

Files

  • 1bd4b963140bf3956fdc35a82b95ea78
    .rar
  • SETUP.LST
  • Support/CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • Support/Comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support/GAPI32.DLL
    .dll windows:4 windows x86 arch:x86

    624c84a04948cdb010eaf9695c0efffd


    Headers

    Imports

    Exports

    Sections

  • Support/INETCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/MSCH2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/MSCHRT20.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    a0a3b80e18d8fb6ca27a1f8612e03304


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support/MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support/MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • Support/Msinet.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    d940cf5b3d0dfb340396c0608ef1a0c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support/OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    1cdcafd13b61ba2d4c28c4daae244a81


    Headers

    Imports

    Exports

    Sections

  • Support/RCHTXCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/RICHED32.DLL
    .dll windows:4 windows x86 arch:x86

    32c903521d208fd36af5670d0a38a2b9


    Headers

    Imports

    Sections

  • Support/RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aaca01ab2cd35af160b8025e9dcfad9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support/SETUP.EXE
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • Support/SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • Support/ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • Support/Setup.Lst
  • Support/TABCTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Support/VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • Support/asycfilt.dll
    .dll windows:4 windows x86 arch:x86

    008ae5f04717491074dbf710ad0ba9e0


    Headers

    Imports

    Exports

    Sections

  • Support/code.txt
  • Support/help.chm
    .chm
  • Support/num3.BAT
  • Support/num3.exe
    .exe windows:4 windows x86 arch:x86

    028b3bdcb1d3f4b9930e8ea8e4b03306


    Headers

    Imports

    Sections

  • Support/olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e2f9006fffe758009776b5b7fdcd342


    Headers

    Imports

    Exports

    Sections

  • Support/stdole2.tlb
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/vb6chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Support/公式高手.DDF
  • Support/新云软件.url
    .url
  • num3.CAB
    .cab
  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • Comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GAPI32.DLL
    .dll windows:4 windows x86 arch:x86

    624c84a04948cdb010eaf9695c0efffd


    Headers

    Imports

    Exports

    Sections

  • INETCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCH2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCHRT20.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    a0a3b80e18d8fb6ca27a1f8612e03304


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • Msinet.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    d940cf5b3d0dfb340396c0608ef1a0c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    1cdcafd13b61ba2d4c28c4daae244a81


    Headers

    Imports

    Exports

    Sections

  • RCHTXCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • RICHED32.DLL
    .dll windows:4 windows x86 arch:x86

    32c903521d208fd36af5670d0a38a2b9


    Headers

    Imports

    Sections

  • RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aaca01ab2cd35af160b8025e9dcfad9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • TABCTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • asycfilt.dll
    .dll windows:4 windows x86 arch:x86

    008ae5f04717491074dbf710ad0ba9e0


    Headers

    Imports

    Exports

    Sections

  • code.txt
  • help.chm
    .chm
  • num3.exe
    .exe windows:4 windows x86 arch:x86

    028b3bdcb1d3f4b9930e8ea8e4b03306


    Headers

    Imports

    Sections

  • olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9e2f9006fffe758009776b5b7fdcd342


    Headers

    Imports

    Exports

    Sections

  • stdole2.tlb
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • vb6chs.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • 安装说明.txt
  • 彩票公式高手V2.8.10升级版/安装说明.txt
  • 彩票公式高手V2.8.10升级版/彩票公式高手V2.8.10升级版/num3.exe
    .exe windows:4 windows x86 arch:x86

    028b3bdcb1d3f4b9930e8ea8e4b03306


    Headers

    Imports

    Sections

  • 彩票公式高手V2.8.10升级版/彩票公式高手V2.8.10升级版/安装说明.txt