General

  • Target

    45251d1447d93ced68f9a50e36a4ff57

  • Size

    716KB

  • MD5

    45251d1447d93ced68f9a50e36a4ff57

  • SHA1

    8439b82a372146a83c93190c411dce9aaac35e9d

  • SHA256

    2d38604d55722b7413b8ab1a7092853b6cee2fd22ba86ee397dbbdd1cfaa5c5a

  • SHA512

    52e0f3522d630058a70b1b8eb73ee89dcde1b5f5132d4ddb63f60a19dcd5760bbc95f4f2c6efeec3b579bf90fac0be19aa2eca3b8d66cac8661bb19483027efc

  • SSDEEP

    12288:eBzlOIl+5/7m39gMpVLTuiWNgrrmWm8foPr0LPc5FU9BDbcE3jSoJV2HkU9:i8IlK7wpVfVrrDmlIDc5FU9hcaSolU9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 45251d1447d93ced68f9a50e36a4ff57
    .rar
  • LanKing/86Router.ini
  • LanKing/ArpPolice.sys
    .sys windows:5 windows x86 arch:x86

    f8b2426a7a8916ab7946a8c14698c76d


    Headers

    Imports

    Sections

  • LanKing/LanKing.exe
    .exe windows:4 windows x86 arch:x86

    50a68373abac9a7441c6aadf9de20d1b


    Headers

    Imports

    Sections

  • LanKing/LanKing.jpg
    .jpg
  • LanKing/MSVCP60.DLL
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • LanKing/Update/netsec.dll
    .dll windows:4 windows x86 arch:x86

    93fca9e1b613ac27abd4908109793969


    Headers

    Imports

    Exports

    Sections

  • LanKing/Update/netsec.exe
    .exe windows:4 windows x86 arch:x86

    e55a1328e9bac74c4b59f63a5612b475


    Headers

    Imports

    Sections

  • LanKing/arppolice.2k
    .sys windows:5 windows x86 arch:x86

    acc4b257e8d1c2aa2338f25d02353112


    Headers

    Imports

    Sections

  • LanKing/arppolice.inf
  • LanKing/arppolice.xp
    .sys windows:5 windows x86 arch:x86

    f8b2426a7a8916ab7946a8c14698c76d


    Headers

    Imports

    Sections

  • LanKing/arppolice_m.inf
  • LanKing/mfc42u.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fdac9a35a5a0b9f10f5a754f5938e7e3


    Headers

    Imports

    Exports

    Sections

  • LanKing/netsec.dll
    .dll windows:4 windows x86 arch:x86

    93fca9e1b613ac27abd4908109793969


    Headers

    Imports

    Exports

    Sections

  • LanKing/pbasv.dat
  • LanKing/pexv.dat
  • LanKing/pmasv.dat
  • LanKing/safety.ipd
  • LanKing/setdrv.exe
    .exe windows:5 windows x86 arch:x86

    3a960e97ca6dfed6ad63c45a77bc0117


    Headers

    Imports

    Sections

  • LanKing/uninstall.bat
  • LanKing/wlst.dat
  • LanKing/升级日志.txt
  • LanKing/新云软件.url
    .url
  • LanKing/火炬防火墙特色介绍.txt