Overview

overview

7

Static

static

7

zyh/Unzip32.dll

windows7-x64

1

zyh/Unzip32.dll

windows10-2004-x64

1

zyh/ZYH.exe

windows7-x64

3

zyh/ZYH.exe

windows10-2004-x64

3

zyh/plugin/7za.exe

windows7-x64

7

zyh/plugin/7za.exe

windows10-2004-x64

7

zyh/plugin...it.exe

windows7-x64

1

zyh/plugin...it.exe

windows10-2004-x64

1

zyh/plugin...er.exe

windows7-x64

1

zyh/plugin...er.exe

windows10-2004-x64

1

zyh/plugin...BC.exe

windows7-x64

1

zyh/plugin...BC.exe

windows10-2004-x64

1

zyh/新云软件.url

windows7-x64

1

zyh/新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    40779ef914c5e97b97a152118232b6a7

  • Size

    535KB

  • MD5

    40779ef914c5e97b97a152118232b6a7

  • SHA1

    32cd26ec865ae1b0b51ecebc28525d9704d8a24f

  • SHA256

    06fccd70d13a2044e08597e6202cd53864d3d71db951b6748793fa5ffc6d6e36

  • SHA512

    0d4936465cbaabebbab6b61fcf26fb593e35581a0024590397309ea565e8870122bf5cdf1d62668bf10d2dcca9da7a6a26dd9a7efe492a7b2d406afc7c50154b

  • SSDEEP

    12288:qxzMajtd7f/iDXO8MIgluIMeyRchyCFfF9ft:IzMahVUO8MTgIMh+kCFDft

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 40779ef914c5e97b97a152118232b6a7
    .rar
  • zyh/FIRSTRUN.ZYH
  • zyh/Unzip32.dll
    .dll windows:4 windows x86 arch:x86

    d7fb4de41cd6c7ef515f3cb090e706e1


    Headers

    Imports

    Exports

    Sections

  • zyh/ZYH.exe
    .exe windows:4 windows x86 arch:x86

    1ae3a3776427f2be2daddc068eb45171


    Headers

    Imports

    Sections

  • zyh/background/zyh emulator 1x.jpg
    .jpg
  • zyh/plugin/7za.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • zyh/plugin/PALEdit.exe
    .exe windows:4 windows x86 arch:x86

    7d5f8d9ce89ee7e77687cb6817dee5b5


    Headers

    Imports

    Sections

  • zyh/plugin/Updater.exe
    .exe windows:4 windows x86 arch:x86

    d544dbab9b54bd0cf765b9a9308ac4f4


    Headers

    Imports

    Sections

  • zyh/plugin/ZYHEMUGBC.exe
    .exe windows:4 windows x86 arch:x86

    e2f3a20bcfe266d924c4de5fea315cd1


    Headers

    Imports

    Sections

  • zyh/roms/最终鬼畜ZYH Emulator.nes
  • zyh/sound/ZYH Emulator.wav
  • zyh/sound/八音盒.ZMY
  • zyh/sound/小霸王其乐无穷啊.wav
  • zyh/sound/管弦乐器.ZMY
  • zyh/sound/贝司音色.ZMY
  • zyh/sound/钟声回荡.ZMY
  • zyh/sound/钢片敲击.ZMY
  • zyh/sound/钢琴音色.ZMY
  • zyh/sound/默认.ZMY
  • zyh/zyh.pal
  • zyh/新云软件.url
    .url