General

  • Target

    3b7a40400a1ef280f809cc531ed43b18

  • Size

    2.7MB

  • MD5

    3b7a40400a1ef280f809cc531ed43b18

  • SHA1

    0812c52e6ebe6401cb205904fca48f22dfbd7250

  • SHA256

    003b04be0c7a7790760dc05f0ad329496ef746e9021982f65261be736627c71c

  • SHA512

    de301bcd2fe11d5a735ad8bd426561bbe3ab701ad16951c5f4c406dff9c516adafa0ad6645e70c7b2e1296063b9eb35cf0977d4c0364ada83ab1406d0c6f0029

  • SSDEEP

    49152:IxED04Re5MRE5ulbLn235nH5JC1/5l+jjd4KxIV0Lr8VO9I+YIFzc2MPFBtyeL0t:aED/R1WuFT2pH58Hwd4KxVwVOqNIFA2p

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b7a40400a1ef280f809cc531ed43b18
    .rar
  • 美萍记账通/MoveFile.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 美萍记账通/database/mpjzt.dat
  • 美萍记账通/mpjzt.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 美萍记账通/mpsoftup.ini
  • 美萍记账通/新云软件.url
    .url