General

  • Target

    2258f75cd2398fcc1c173619b932b88b

  • Size

    2.9MB

  • MD5

    2258f75cd2398fcc1c173619b932b88b

  • SHA1

    1c4d665041f5851c4f891e6d40f6038935375c04

  • SHA256

    bdb8d5dde807cf7129dcd99d968e531acf41d71a0fef4796cc87bbca664e15af

  • SHA512

    f26476de234e3d6ce155fc251a291f74de889026d41584dc61e49388e8c7c1633fd90eff59b2463cbba9fc0b9144de9f5e33d0bd07e2270699aa0a9f7ad62e4b

  • SSDEEP

    49152:NgxfnU3UhIauNoMlnXpcbwU4+A+58TYAM/eNhdKnHjz8mf2ZMTPemYceBYSWYTcj:Nghhinub4aqbd2XOZMytceoIcj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 2258f75cd2398fcc1c173619b932b88b
    .rar
  • SETUP.EXE
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • SETUP.LST
  • yxxzjl.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • CMCTLCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • COMCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GUDATA.DAT
  • INETCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSINET.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    96286284ff8e040938ba779778d1542e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    479485184984aadb89b6e8cf253117e6


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • SETDATA.DAT
  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Tclock.exe
    .exe windows:4 windows x86 arch:x86

    bd58f134669361881e425f5db359ecbd


    Headers

    Imports

    Sections

  • UWDATA.DAT
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    b84a8bb1acf41d227f96e04bf9672ef5


    Headers

    Imports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • YXXZJL.EXE
    .exe windows:4 windows x86 arch:x86

    350ec27f74128a886324c48246989064


    Headers

    Imports

    Sections

  • pregedit2.jpg
    .jpg
  • setup1.exe
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • 新云软件.url
    .url
  • 游戏限制精灵帮助.doc
    .doc windows office2003