General

  • Target

    51c2e8fb2c9f410db6e1941961ee4f33

  • Size

    4.6MB

  • MD5

    51c2e8fb2c9f410db6e1941961ee4f33

  • SHA1

    4a2ae68e26269990f08f5e95cd836471fa226abd

  • SHA256

    4150593bcef490f447d720aab75b2918ff36c7a229137a06854cca09ed513a6d

  • SHA512

    7b779fe3ffd843a3b965d09db45129f04b98f3861f90c1fa9bd04847014236ed2c81e80ffdd118cb5f08c6f89cd070b3269a005c6619b74e8fc13b8da7afa176

  • SSDEEP

    98304:fl7w2BTGNNsogNg2QnTtwVIistBfL/EZ78T45mK3/AM474TZpR:f7GNNsE2uwVIis3rcSemK3uyZpR

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • 51c2e8fb2c9f410db6e1941961ee4f33
    .rar
  • mathchina/SETUP.LST
  • mathchina/Support/00.bmp
  • mathchina/Support/11.gif
  • mathchina/Support/12.gif
  • mathchina/Support/15.gif
  • mathchina/Support/16.gif
  • mathchina/Support/20.gif
  • mathchina/Support/21.gif
  • mathchina/Support/22.gif
  • mathchina/Support/23.gif
  • mathchina/Support/24.gif
  • mathchina/Support/31.gif
  • mathchina/Support/32.gif
  • mathchina/Support/33.gif
  • mathchina/Support/34.gif
  • mathchina/Support/41.gif
  • mathchina/Support/42.gif
  • mathchina/Support/50.gif
  • mathchina/Support/51.gif
  • mathchina/Support/52.gif
  • mathchina/Support/53.gif
  • mathchina/Support/61.gif
  • mathchina/Support/71.gif
  • mathchina/Support/81.gif
  • mathchina/Support/91.gif
  • mathchina/Support/92.gif
  • mathchina/Support/93.gif
  • mathchina/Support/94.gif
  • mathchina/Support/ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/BMP.BMP
  • mathchina/Support/CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mathchina/Support/COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mathchina/Support/MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mathchina/Support/MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a48bc65cb80524393ed5ceb59b94e776


    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/Mathsay.DDF
  • mathchina/Support/OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    015a88ce655e75d0fb34f6004e14e8c0


    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5ccf8bf224eb9ec83fbb805c335d308


    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/README.TXT
  • mathchina/Support/SETUP.EXE
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • mathchina/Support/SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • mathchina/Support/SETUP1.JPG
    .jpg
  • mathchina/Support/SETUP2.JPG
    .jpg
  • mathchina/Support/ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • mathchina/Support/STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mathchina/Support/Setup.Lst
  • mathchina/Support/VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mathchina/Support/VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mathchina/Support/help.txt
  • mathchina/Support/mathsay.BAT
  • mathchina/Support/mathsay.exe
    .exe windows:4 windows x86 arch:x86

    b4f978dd5221e91d01e90550e71e972b


    Headers

    Imports

    Sections

  • mathchina/mathsay.CAB
    .cab
  • 00.bmp
  • 11.gif
  • 12.gif
  • 15.gif
  • 16.gif
  • 20.gif
  • 21.gif
  • 22.gif
  • 23.gif
  • 24.gif
  • 31.gif
  • 32.gif
  • 33.gif
  • 34.gif
  • 41.gif
  • 42.gif
  • 50.gif
  • 51.gif
  • 52.gif
  • 53.gif
  • 61.gif
  • 71.gif
  • 81.gif
  • 91.gif
  • 92.gif
  • 93.gif
  • 94.gif
  • BMP.BMP
  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    748b8691a0d45b447a059b7ae299a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    4d509ffe740b37c7b6ce748642da3704


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    04b9c2e7c9382d2e610aaad198ba3446


    Headers

    Imports

    Exports

    Sections

  • asycfilt.dll
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • comdlg32.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • help.txt
  • mathsay.exe
    .exe windows:4 windows x86 arch:x86

    b4f978dd5221e91d01e90550e71e972b


    Headers

    Imports

    Sections

  • msvbvm60.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a48bc65cb80524393ed5ceb59b94e776


    Headers

    Imports

    Exports

    Sections

  • oleaut32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    015a88ce655e75d0fb34f6004e14e8c0


    Headers

    Imports

    Exports

    Sections

  • olepro32.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f5ccf8bf224eb9ec83fbb805c335d308


    Headers

    Imports

    Exports

    Sections

  • readme.txt
  • setup1.jpg
    .jpg
  • setup2.jpg
    .jpg
  • stdole2.tlb
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • mathchina/setup.exe
    .exe windows:4 windows x86 arch:x86

    e0645631469507a53fff2b011b90023d


    Headers

    Imports

    Sections

  • mathchina/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot