General

  • Target

    3e6ff43ccbe788d11c269d066bb7bff3

  • Size

    2.6MB

  • MD5

    3e6ff43ccbe788d11c269d066bb7bff3

  • SHA1

    110c7836f19d4cf8239e67b9b2e43800c9462f43

  • SHA256

    a486efac5df0ae8f7d8a19a3a7343b5f2e7f1947d32934658b677e39cdfdff51

  • SHA512

    c7fee95b5bc35258af81ec694e3cdd366564a5235b609044752c276855027619d81736e3e317da3c11643a42a5ccb7c9a5187c3ceeb899def77ac7e7ed02a895

  • SSDEEP

    49152:9uWIivyZkOP/WD0Qk1vb2PCi47J3gtNsen+cO3Ujlt2YslFa7p:UQSlHWPcjz13g7JO3Ujloqp

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e6ff43ccbe788d11c269d066bb7bff3
    .rar
  • DiiCall-v1.2/Ansi/atl71.dll
    .dll windows:4 windows x86 arch:x86

    9399b4de2daf372a7325cd32fbe93edf


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/Phoneinfc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • DiiCall-v1.2/System Folder/RTCDLL.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4539a537cecd25fa2a4692764ec2dc9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/System Folder/RTCRES.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • DiiCall-v1.2/System Folder/RTCRTP.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    479075f453242be9b819ec5b63f6de8b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/System Folder/dXDBInsp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • DiiCall-v1.2/Windows/winsxs/Manifests/x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.1002.3_x-ww_021cfae0.Manifest
    .xml
  • DiiCall-v1.2/Windows/winsxs/Manifests/x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.1002.3_x-ww_021cfae0.cat
  • DiiCall-v1.2/Windows/winsxs/Manifests/x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.1002.3_x-ww_92561fce.Manifest
  • DiiCall-v1.2/Windows/winsxs/Manifests/x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.1002.3_x-ww_92561fce.cat
  • DiiCall-v1.2/Windows/winsxs/Manifests/x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.1002.3_x-ww_88ef1b2a.Manifest
    .xml
  • DiiCall-v1.2/Windows/winsxs/Manifests/x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.1002.3_x-ww_88ef1b2a.cat
  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.1002.3_x-ww_019eeb5f/Dxmrtp.cat
  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.1002.3_x-ww_019eeb5f/Dxmrtp.man
    .xml
  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.1002.3_x-ww_019eeb5f/dxmrtp.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    fb5be122c7800c00e7e8692c2897089e


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.1002.3_x-ww_91d8104d/RTCDLL.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c8eddcdffea0d4fca3eb2f8403f21f7a


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.1002.3_x-ww_91d8104d/RtcDll.cat
  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.1002.3_x-ww_91d8104d/RtcDll.man
  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.1002.3_x-ww_88710ba9/RTCRES.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.1002.3_x-ww_88710ba9/RtcRes.cat
  • DiiCall-v1.2/Windows/winsxs/x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.1002.3_x-ww_88710ba9/RtcRes.man
    .xml
  • DiiCall-v1.2/YLUSBTEL.dll
    .dll windows:4 windows x86 arch:x86

    c2db12762baf596440c21c39c5052076


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/atl71.dll
    .dll windows:4 windows x86 arch:x86

    7c3004ebf21f282412fa952c164aa2bb


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/dbghelp.dll
    .dll windows:5 windows x86 arch:x86

    4e144810951e06c4166296e61c8cd306


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/diicall蒲公英网络电话安装说明.txt
  • DiiCall-v1.2/msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/pc2phone.exe
    .exe windows:4 windows x86 arch:x86

    50334b36cae85e6f68432d8300746351


    Headers

    Imports

    Sections

  • DiiCall-v1.2/setup.msi
    .msi
  • DiiCall-v1.2/vtc.exe
    .exe windows:4 windows x86 arch:x86

    00d51248ca94a56dd558a8a4db402e31


    Headers

    Imports

    Sections

  • DiiCall-v1.2/zlib.dll
    .dll windows:4 windows x86 arch:x86

    d864ee5b5be09704bef5ffbefb087055


    Headers

    Imports

    Exports

    Sections

  • DiiCall-v1.2/新云软件.url
    .url