General

  • Target

    4a93cef0a19778f793f29fb7617d3df1

  • Size

    1.3MB

  • MD5

    4a93cef0a19778f793f29fb7617d3df1

  • SHA1

    c747affb711eda50e42bd7c2ef24b1badc6345e2

  • SHA256

    87f3103c6c21383b3fac20bf331769d8facc5eb02880a50c5e0e0d03d35fb76f

  • SHA512

    677c91c9eab0823c7b2bbb16d7b15e674a6850ee503f8a6f1bd1743a7c7453b21f6a6c248e3c9fb66dc852c8b45ece2b3dd4c3f0a5c2901c01cdea68debdd970

  • SSDEEP

    24576:wNUX8OrmDfKoNS9vPZriPPZrZ0BD8QYylLN+A:wNc8g61k9nZ+HZF0BD8QNp+A

Score
3/10

Malware Config

Signatures

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a93cef0a19778f793f29fb7617d3df1
    .rar
  • ActiveX/DLL/ICcard_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/DLL/ICcard_dll.doc
    .doc windows office2003
  • ActiveX/DLL/KB_DLL.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/DLL/KB_DLL.doc
    .doc windows office2003
  • ActiveX/Sample/Delphi/写卡机/Demo.dpr
  • ActiveX/Sample/Delphi/写卡机/Demo.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ActiveX/Sample/Delphi/写卡机/Demo.res
  • ActiveX/Sample/Delphi/写卡机/ICcard_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/Delphi/写卡机/Unt_Demo.dfm
  • ActiveX/Sample/Delphi/写卡机/Unt_Demo.pas
  • ActiveX/Sample/Delphi/密码键盘/Demo.dpr
  • ActiveX/Sample/Delphi/密码键盘/Demo.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ActiveX/Sample/Delphi/密码键盘/Demo.res
  • ActiveX/Sample/Delphi/密码键盘/KB_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/Delphi/密码键盘/Unt_Demo.dcu
  • ActiveX/Sample/Delphi/密码键盘/Unt_Demo.dfm
  • ActiveX/Sample/Delphi/密码键盘/Unt_Demo.pas
  • ActiveX/Sample/PB/密码键盘/SAMPLE/KB_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/PB/密码键盘/SAMPLE/LIBJCC.DLL
    .dll windows:4 windows x86 arch:x86

    5c8ced2ee02b8ac71ee4a62110c1734c


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/PB/密码键盘/SAMPLE/SAMPLE.EXE
    .exe windows:4 windows x86 arch:x86

    fe5db82acba4930d8b7ddc4dcab540b2


    Headers

    Imports

    Sections

  • ActiveX/Sample/PB/密码键盘/SAMPLE/SAMPLE.PBL
  • ActiveX/Sample/PB/密码键盘/SAMPLE/SAMPLE.PBT
  • ActiveX/Sample/PB/密码键盘/SAMPLE/SAMPLE.PBW
  • ActiveX/Sample/PB/磁卡读写器/SAMPLE/ICcard_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/PB/磁卡读写器/SAMPLE/LIBJCC.DLL
    .dll windows:4 windows x86 arch:x86

    5c8ced2ee02b8ac71ee4a62110c1734c


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/PB/磁卡读写器/SAMPLE/SAMPLE.EXE
    .exe windows:4 windows x86 arch:x86

    fe5db82acba4930d8b7ddc4dcab540b2


    Headers

    Imports

    Sections

  • ActiveX/Sample/PB/磁卡读写器/SAMPLE/SAMPLE.PBL
  • ActiveX/Sample/PB/磁卡读写器/SAMPLE/SAMPLE.PBT
  • ActiveX/Sample/PB/磁卡读写器/SAMPLE/SAMPLE.PBW
  • ActiveX/Sample/VB/密码键盘/SAMPLE/KB_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/VB/密码键盘/SAMPLE/MSSCCPRJ.SCC
  • ActiveX/Sample/VB/密码键盘/SAMPLE/Module1.bas
  • ActiveX/Sample/VB/密码键盘/SAMPLE/SAMPLE.EXE
    .exe windows:4 windows x86 arch:x86

    e3fe3d74a728b75e32d32dd5126df566


    Headers

    Imports

    Sections

  • ActiveX/Sample/VB/密码键盘/SAMPLE/SAMPLE.FRM
  • ActiveX/Sample/VB/密码键盘/SAMPLE/SAMPLE.VBP
  • ActiveX/Sample/VB/密码键盘/SAMPLE/SAMPLE.VBW
  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/ICcard_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/MSSCCPRJ.SCC
  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/Module1.bas
  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/SAMPLE.EXE
    .exe windows:4 windows x86 arch:x86

    7f580dd9ee6693cbd255fc964c88aa96


    Headers

    Imports

    Sections

  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/SAMPLE.FRM
  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/SAMPLE.VBP
  • ActiveX/Sample/VB/磁卡读写器/SAMPLE/SAMPLE.VBW
  • ActiveX/Sample/VC/密码键盘/SAMPLE/RES/SAMPLE.ICO
  • ActiveX/Sample/VC/密码键盘/SAMPLE/RES/SAMPLE.RC2
  • ActiveX/Sample/VC/密码键盘/SAMPLE/ReadMe.txt
  • ActiveX/Sample/VC/密码键盘/SAMPLE/Release/KB_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/VC/密码键盘/SAMPLE/Release/SAMPLE.EXE
    .exe windows:4 windows x86 arch:x86

    942b66e7cc57401872e1dc31e8de1744


    Headers

    Imports

    Sections

  • ActiveX/Sample/VC/密码键盘/SAMPLE/Resource.h
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.APS
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.CLW
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.CPP
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.DSP
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.DSW
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.H
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.NCB
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.OPT
    .js
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.PLG
    .html
  • ActiveX/Sample/VC/密码键盘/SAMPLE/SAMPLE.RC
  • ActiveX/Sample/VC/密码键盘/SAMPLE/StdAfx.cpp
  • ActiveX/Sample/VC/密码键盘/SAMPLE/StdAfx.h
  • ActiveX/Sample/VC/密码键盘/SAMPLE/sampleDlg.cpp
  • ActiveX/Sample/VC/密码键盘/SAMPLE/sampleDlg.h
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/RES/SAMPLE.ICO
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/RES/SAMPLE.RC2
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/ReadMe.txt
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/Release/ICcard_dll.dll
    .dll windows:4 windows x86 arch:x86

    5cb5711c56fa4eeed9e32d3e86047b31


    Headers

    Imports

    Exports

    Sections

  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/Release/SAMPLE.EXE
    .exe windows:4 windows x86 arch:x86

    d4fd1b228cbb384e026d4611ab6b0701


    Headers

    Imports

    Sections

  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/Resource.h
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.APS
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.CLW
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.CPP
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.DSP
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.DSW
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.H
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.NCB
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.OPT
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.PLG
    .html
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/SAMPLE.RC
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/StdAfx.cpp
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/StdAfx.h
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/sampleDlg.cpp
  • ActiveX/Sample/VC/磁卡读写器/SAMPLE/sampleDlg.h
  • OCX/Sample/VB/MSSCCPRJ.SCC
  • OCX/Sample/VB/Module1.bas
  • OCX/Sample/VB/SAMPLE.VBP
  • OCX/Sample/VB/SAMPLE.VBW
  • OCX/Sample/VB/sample.exe
    .exe windows:4 windows x86 arch:x86

    22f3078d11214bd613111be1be542c44


    Headers

    Imports

    Sections

  • OCX/Sample/VB/sample.frm
    .vbs
  • OCX/Sample/VC/RES/SAMPLE.ICO
  • OCX/Sample/VC/RES/SAMPLE.RC2
  • OCX/Sample/VC/ReadMe.txt
  • OCX/Sample/VC/Release/sample.exe
    .exe windows:4 windows x86 arch:x86

    6ef1feb170e62c4436e9bfbb69ef0f86


    Headers

    Imports

    Sections

  • OCX/Sample/VC/Resource.h
  • OCX/Sample/VC/SAMPLE.CLW
  • OCX/Sample/VC/SAMPLE.CPP
  • OCX/Sample/VC/SAMPLE.DSW
  • OCX/Sample/VC/SAMPLE.H
  • OCX/Sample/VC/SAMPLE.NCB
  • OCX/Sample/VC/SAMPLE.OPT
  • OCX/Sample/VC/SAMPLE.PLG
    .html
  • OCX/Sample/VC/StdAfx.cpp
  • OCX/Sample/VC/StdAfx.h
  • OCX/Sample/VC/sample.aps
  • OCX/Sample/VC/sample.dsp
  • OCX/Sample/VC/sample.rc
  • OCX/Sample/VC/sampleDlg.cpp
  • OCX/Sample/VC/sampleDlg.h
  • OCX/Sample/VC/sle300.cpp
  • OCX/Sample/VC/sle300.h
  • Web ActiveX/DLL/MagCard.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ad3eff91438a007bff75428eafac8eeb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Web ActiveX/Sample HTML/TestMagCard.htm
    .html .js polyglot
  • Web ActiveX/Sample HTML/TestMagCard2.htm
    .html .js polyglot