Overview

overview

7

Static

static

7

狂人好�...ad.dll

windows7-x64

1

狂人好�...ad.dll

windows10-2004-x64

1

狂人好�...Ex.dll

windows7-x64

1

狂人好�...Ex.dll

windows10-2004-x64

1

狂人好�...EL.dll

windows7-x64

7

狂人好�...EL.dll

windows10-2004-x64

7

狂人好�...PI.dll

windows7-x64

1

狂人好�...PI.dll

windows10-2004-x64

1

狂人好�...xt.dll

windows7-x64

1

狂人好�...xt.dll

windows10-2004-x64

1

狂人好�...et.dll

windows7-x64

1

狂人好�...et.dll

windows10-2004-x64

1

狂人好�...ln.dll

windows7-x64

1

狂人好�...ln.dll

windows10-2004-x64

1

狂人好�...pt.dll

windows7-x64

1

狂人好�...pt.dll

windows10-2004-x64

1

狂人好�...ec.dll

windows7-x64

1

狂人好�...ec.dll

windows10-2004-x64

1

狂人好�...��.url

windows7-x64

1

狂人好�...��.url

windows10-2004-x64

1

狂人好�....0.exe

windows7-x64

1

狂人好�....0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    25b61042e1ce3de1549ddd9181916c2e

  • Size

    826KB

  • MD5

    25b61042e1ce3de1549ddd9181916c2e

  • SHA1

    50e2d2e055d16bf4e262a437a72f6239a3457692

  • SHA256

    5ee9332b8daa360cd4cbfe90158c78abab24d37f9b3d8f18fa586602fa68af4a

  • SHA512

    b23fccc9ff7a6370ebc8cae138c92eb770f4f4ee6fd2940046af67fd65990429c8f6253de1535433feed8c0f4191588843d1ce219c44749ff0b0b70a449ed8a0

  • SSDEEP

    24576:44wnBZEI4knPqNePnuP8+o/7k4Hmhq6qhkC0b:rwnB94knmCH+GDkqZ0b

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 25b61042e1ce3de1549ddd9181916c2e
    .rar
  • 狂人好友分析师KR2.0/EThread.fne
    .dll windows:4 windows x86 arch:x86

    62e5db1ba371409d5b2d25cef78e9ce3


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/RegEx.fnr
    .dll windows:4 windows x86 arch:x86

    17065b5c253ba1d2ebb061964e090d5e


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 狂人好友分析师KR2.0/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    d0090138d80c47735b70f81ce3f6c2b7


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    70aa7e4af9351a4a11163b4edc29b626


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/script.fne
    .dll windows:4 windows x86 arch:x86

    029aaaa8c2602e58fcb15ff3274d2708


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/spec.fne
    .dll windows:4 windows x86 arch:x86

    0b8b5f9848c670c631fa790d1a1a90e5


    Headers

    Imports

    Exports

    Sections

  • 狂人好友分析师KR2.0/新云软件.url
    .url
  • 狂人好友分析师KR2.0/狂人QQ好友分析师KR2.0.exe
    .exe .js windows:4 windows x86 arch:x86 polyglot

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 狂人好友分析师KR2.0/狂人QQ好友分析师KR2.0.exe.org
    .exe .js windows:4 windows x86 arch:x86 polyglot

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections