Overview

overview

7

Static

static

7

QQ聊天�....0.exe

windows7-x64

7

QQ聊天�....0.exe

windows10-2004-x64

7

QQ聊天�...EL.dll

windows7-x64

7

QQ聊天�...EL.dll

windows10-2004-x64

7

QQ聊天�...��.url

windows7-x64

1

QQ聊天�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40fd9336622057061cb3094bf7e9aaf4

  • Size

    5.2MB

  • MD5

    40fd9336622057061cb3094bf7e9aaf4

  • SHA1

    c02a5d747a0117b4bc9dbe8dbe722208b5c9d578

  • SHA256

    7cbcf33756f0e9497174a0d1326b52a8e4bf768c0f33fba920d44b395041764f

  • SHA512

    ba8c77c31f18a98ef47203c397fd231f35b8c140c5e32655be28600a33d6558ba7b2a35017bae83666770bba26f14a7bd62832d4545587be44ab19d9677bd9df

  • SSDEEP

    98304:PThWDjF1+lLA4hBkFsEinPiksdRxHf/Idkwhd5nu2LHcFZ7XeNpyA/pAyOjuei1:PFWDjUasEiP3sVXIiwRnEbeNpjuyOj12

Score
7/10
aspackv2upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 40fd9336622057061cb3094bf7e9aaf4
    .rar
  • QQ聊天精灵V1.0/QQWry.Dat
  • QQ聊天精灵V1.0/QQ聊天精灵V1.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQ聊天精灵V1.0/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • QQ聊天精灵V1.0/ico/1.ico
  • QQ聊天精灵V1.0/ico/2.ico
  • QQ聊天精灵V1.0/ico/3.ico
  • QQ聊天精灵V1.0/ico/4.ico
  • QQ聊天精灵V1.0/ico/5.ico
  • QQ聊天精灵V1.0/ico/6.ico
  • QQ聊天精灵V1.0/使用说明.txt
  • QQ聊天精灵V1.0/新云软件.url
    .url