Overview

overview

3

Static

static

3

PClient.exe

windows7-x64

1

PClient.exe

windows10-2004-x64

1

PServer.exe

windows7-x64

1

PServer.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    28fe897cc6a2e0c4084737784f716aaf

  • Size

    513KB

  • MD5

    28fe897cc6a2e0c4084737784f716aaf

  • SHA1

    9d1374cb2e0675083c4fff01d72ad36dba6aac85

  • SHA256

    298c23868953f13674908955b1d70fe698938c71b0c3f37fb02064a68bd958c0

  • SHA512

    b114096583d2c56c09d13c28ebc69e3d206571e828bc5b010a7977cbd8da444218c26841b6123c7ba6b1d55c7974d300a7b56fc20e35ccac177420830cae720e

  • SSDEEP

    12288:mEpAQrK22VwyzRpb1AR92DzDyCbPILr5dc0lp0Ca+TEqKl:mEpg7bSGzDfPcjkCa+TEJl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 28fe897cc6a2e0c4084737784f716aaf
    .rar
  • 195212052/About.dcu
  • 195212052/About.ddp
  • 195212052/About.dfm
  • 195212052/About.pas
  • 195212052/About.~ddp
  • 195212052/About.~dfm
  • 195212052/About.~pas
  • 195212052/Client.dcu
  • 195212052/Client.ddp
  • 195212052/Client.dfm
  • 195212052/Client.pas
  • 195212052/Client.~ddp
  • 195212052/Client.~dfm
  • 195212052/Client.~pas
  • 195212052/Connect.dcu
  • 195212052/Connect.ddp
  • 195212052/Connect.dfm
  • 195212052/Connect.pas
  • 195212052/Connect.~ddp
  • 195212052/Connect.~dfm
  • 195212052/Connect.~pas
  • 195212052/PClient.cfg
  • 195212052/PClient.dof
  • 195212052/PClient.dpr
  • 195212052/PClient.rar
    .rar
  • PClient.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 195212052/PClient.res
  • 195212052/PClient.~dpr
  • 195212052/PServer.cfg
  • 195212052/PServer.dof
  • 195212052/PServer.dpr
  • 195212052/PServer.rar
    .rar
  • PServer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 195212052/PServer.res
  • 195212052/PServer.~dpr
  • 195212052/Server.dcu
  • 195212052/Server.ddp
  • 195212052/Server.dfm
  • 195212052/Server.pas
  • 195212052/Server.~ddp
  • 195212052/Server.~dfm
  • 195212052/Server.~pas
  • 195212052/下载说明.htm
    .html .js polyglot