General

  • Target

    470bae2c1cab206f885de27507fbd9c2

  • Size

    5.5MB

  • MD5

    470bae2c1cab206f885de27507fbd9c2

  • SHA1

    576492afa5a4868b23fb33b89e19d3d3d99367f8

  • SHA256

    5d99ba705c53cd7048ed4d5fa73a0ff2b6818837d6c594f71c36ff5cc8c1dc24

  • SHA512

    0eec38b968abc0c9ebd97bf1fc69e7511560d6a215500a3b3f6df7d1ad9385306ad2ec291656bd278b211436e942ae541951d136d527a13916f444aa1af851d1

  • SSDEEP

    98304:ZQNfz9ko9Tq8TcOCIo1/Xx2A0RlT3PtEUc7eIjo9:SNb9kodqg3CBfjSJ+Uc7Vo9

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 470bae2c1cab206f885de27507fbd9c2
    .rar
  • HA_FolderMatchv3.4.8_yfy/1先安装英文原版/FolderMatch.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • COMCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    c8cebbf034d8c6304701e5ec3fae70a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Cfx4032.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    2ffb90a2b8065ab98fab19ca2783e07d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Documents.lst
  • FMDONE.WAV
  • FOLDERMATCH.HLP
  • FolderMatch.cnt
  • FolderMatch.exe
    .exe windows:4 windows x86 arch:x86

    4c5a483c1ce67d07b1df8e337a7bae70


    Headers

    Imports

    Sections

  • GRAPHICS.LST
  • LVWBACK.GIF
  • MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    6a66fb523666c583cb87c4630ccedf7a


    Headers

    Imports

    Exports

    Sections

  • Msflxgrd.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    138f160cfefa07306f399d9bfa41ad11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • PickDir.dll
    .dll windows:4 windows x86 arch:x86

    533cbbf77cac45d970f9737e606fc981


    Headers

    Imports

    Exports

    Sections

  • REGISTER.TXT
  • RICHED32.DLL
    .dll windows:5 windows x86 arch:x86

    a7a197727231042d22b24fc8d3f916fb


    Headers

    Imports

    Sections

  • RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aaca01ab2cd35af160b8025e9dcfad9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Readme.txt
  • RestoreDefaults.fms
  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    7e49acee36b1543e75d387196a811d5c


    Headers

    Imports

    Sections

  • SNTP Wizard2.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    47bf5aed4d922620f0086e33e97ce8c4


    Headers

    Imports

    Exports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • SfxBar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    85fd9178b19b4b100bb3ea285677e8a8


    Headers

    Imports

    Exports

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • VBCRC32.DLL
    .dll windows:4 windows x86 arch:x86

    17248102e9542b5c2d3f938b0125fa51


    Headers

    Imports

    Exports

    Sections

  • WINXSCOM.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f0f578c7ca5c4df70ad0001231f62f70


    Headers

    Imports

    Exports

    Sections

  • XPDF_README
  • doctxt.dll
    .dll windows:4 windows x86 arch:x86

    8549d7a3d21e67f82f44c8a5968f8b1a


    Headers

    Imports

    Sections

  • filetreelist.avi
  • fldmatch.dll
    .dll windows:4 windows x86 arch:x86

    60cd71e784d252c8ff70bfd1e38f8b9e


    Headers

    Imports

    Exports

    Sections

  • fmregister.wav
  • hasha.dll
    .dll windows:4 windows x86 arch:x86

    76baabbfe5ab524fcb342cad46a22474


    Headers

    Imports

    Sections

  • hexdump.dll
    .dll windows:4 windows x86 arch:x86

    bcb6ce04913b6f8436617f71f1f3b936


    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:4 windows x86 arch:x86

    179b04fb57bf5f17850c94a941db63fa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sbspdftxt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fffab9dd96455a0b0b85ae3ce903f95b


    Headers

    Imports

    Exports

    Sections

  • sbspdftxt.lic
  • scanfiles.avi
  • scrrun.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    76c11ecf1003000e53224ed1abb74067


    Headers

    Imports

    Exports

    Sections

  • small_find_computer.avi
  • stamin32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    63d97b86cd0c9cb63cb3439d026fa8f8


    Headers

    Imports

    Exports

    Sections

  • update list.avi
  • HA_FolderMatchv3.4.8_yfy/1先安装英文原版/Setup.Lst
  • HA_FolderMatchv3.4.8_yfy/1先安装英文原版/setup.exe
    .exe windows:4 windows x86 arch:x86

    9e36d5e1cceea0330fdd26492ec00ae2


    Headers

    Imports

    Sections

  • HA_FolderMatchv3.4.8_yfy/2后安装汉化补丁/HB_FolderMatchv3.4.8_yfy.exe
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • HA_FolderMatchv3.4.8_yfy/Thumbs.db
  • HA_FolderMatchv3.4.8_yfy/下载说明.htm
    .html .js polyglot
  • HA_FolderMatchv3.4.8_yfy/快照.jpg
    .jpg
  • 下载说明.htm
    .html .js polyglot