Overview

overview

7

Static

static

7

Images/新...��.url

windows7-x64

1

Images/新...��.url

windows10-2004-x64

1

LianLianKan.exe

windows7-x64

1

LianLianKan.exe

windows10-2004-x64

1

Maps.exe

windows7-x64

1

Maps.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    429c4698eb1536db5ee14319a203ebc8

  • Size

    1.6MB

  • MD5

    429c4698eb1536db5ee14319a203ebc8

  • SHA1

    b4a10f0c4accc04c59df8278b60f86474cf8ff74

  • SHA256

    8befe23c9c799c92ead89a887dbc1e6114e153b6854b019d22ecc177b22ac21a

  • SHA512

    945a42bc2fb599b7b31f6ddced247cf909bc37736b063f0464cd5adb7ba97e8d504c2c427010a2f7ddf722d50cb0d9ce943076a7f0c6e709f4495c9da85cb61e

  • SSDEEP

    49152:At7+imiW++AvK3XzVFG85n+2A7ng2IfgZjGT:FKJvK3Lzn+77g28gZj0

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 429c4698eb1536db5ee14319a203ebc8
    .rar
  • Config.ini
  • Images/B1.jpg
    .jpg
  • Images/B2.jpg
    .jpg
  • Images/B3.jpg
    .jpg
  • Images/B4.jpg
    .jpg
  • Images/B5.jpg
    .jpg
  • Images/Q1.jpg
    .jpg
  • Images/Q2.jpg
    .jpg
  • Images/Q3.jpg
    .jpg
  • Images/Q4.jpg
    .jpg
  • Images/Q5.jpg
    .jpg
  • Images/新云软件.url
    .url
  • LianLianKan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Maps.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Maps/1.xml
    .xml
  • Maps/2.xml
    .xml
  • Maps/3.xml
    .xml
  • Maps/4.xml
    .xml
  • Mouse.cur
  • Sound/dian.wav
  • Sound/jiangli.wav
  • Sound/jieshu.wav
  • Sound/kaishi.wav
  • Sound/yinyue1.mid
  • Sound/yinyue2.mid
  • Sound/yinyue3.mid
  • Sound/yinyue4.mid
  • Sound/yinyue5.mid
  • Sound/yinyue6.mid
  • Sound/yinyue7.mid
  • Sound/zhadan.wav
  • help.ini