Overview

overview

7

Static

static

7

QQ大家�...03.exe

windows7-x64

7

QQ大家�...03.exe

windows10-2004-x64

7

patch.dll

windows7-x64

7

patch.dll

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41960842090dc952bd08a6becb4c3f30

  • Size

    724KB

  • MD5

    41960842090dc952bd08a6becb4c3f30

  • SHA1

    226feb68326c1055c745181744b31ed51a97cf9b

  • SHA256

    316b4907777c2767ed465efc8146b596c85f59e2437798e144d6f298b05393fe

  • SHA512

    832cee077dd7fb2d9fdf10f95eaf6e38c951267459dce26e820fb2c52f9ca61259c9995b6f7ba8923c04a0628fa298a34725f9ff078d2b5516eb670c4389d265

  • SSDEEP

    12288:+ye+H6pYMfvkpXDnijU73ONtA4dc/QVozRD1BHionUE3UWK6pTQjrnCRZPKKf1g1:++H6hfspXriwctAd/Z1D1BHbbEH6psjj

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 41960842090dc952bd08a6becb4c3f30
    .rar
  • QQ大家来找茬外挂加强版V2.03.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • patch.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 使用说明.txt
  • 新云软件.url
    .url