General

  • Target

    504116fe560f21188b73ac17b6388f38

  • Size

    12.3MB

  • MD5

    504116fe560f21188b73ac17b6388f38

  • SHA1

    0d7e3c6961e4d5e39f689641eb3c981bc5e0958d

  • SHA256

    ca493000c5eaff8432d6e2f3fc11a35fc019f1ff30806c661fba26e9941b5fb7

  • SHA512

    9a1db4b2f610c3c4c75ac0ced7c273b6cd199df68e57b8a94f7faace0239f1e353ec2549313789f94a4f1f550082f90dca2b782f1c9ebb26daadb18373aedef1

  • SSDEEP

    196608:Kda1SgE1FyNhBQBsNANhiDajuvtdQlLCN3R2pP0iQ/p/Oh:UalBQyNAG2SbN34syh

Score
7/10

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 504116fe560f21188b73ac17b6388f38
    .rar
  • GongShaFuZhu13/【x1】攻沙辅助/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    e3493c33b4da4c9e132164b491c5d2cc


    Code Sign

    Headers

    Imports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/FILE.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a10a0592e6925a16bb3205010b141edd


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/MSG.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    822d3ecf48a41b86df18a99da942259e


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/READ.DLL
    .dll windows:4 windows x86 arch:x86

    82690bf7a1d693113767fa30f0bfc82b


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/REGDLL.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f076a1e4fbab4d2c4bccbdc4ea8a1b72


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/REMOTEANSWER_JDYOU.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    a96344c3cbb23ac2220c3e585f301035


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/SGUOBROWSER.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    243428a951834ebf532b0ff48d317043


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/WEBOPERATION.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    37a2eee5dfe023c1fccb33f88a487209


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/WINDOW.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    23c0230a3203b217bd8c3dbcb089c026


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/plugin/WINDOW.ini
  • GongShaFuZhu13/【x1】攻沙辅助/uservar.ini
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/RegDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f076a1e4fbab4d2c4bccbdc4ea8a1b72


    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/xgs/beibao.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/boss.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/bossdk.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/bossdk1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/chuansy.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/cmrenwu.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/ditu.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/dj.txt
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/dm.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/xgs/duanzao.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/fuben.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/gjz.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/gjz1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/guanbi.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/guanbi1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/hanhua.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/help.doc
    .doc windows office2003
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/huishou.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/huweidk.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/jldting.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/jldtingdk.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/jldtingdk1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/kaiqi.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/key.txt
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/kfhd.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/kfhddk.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/kfhddk1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/manxing.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/pingbi.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/pingbile.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/saizi.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/suishen.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/sying.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/syingle.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/tafang.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/tafanglm.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/tafanglm1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/tafling.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/tflingqu.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/tflingqu1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/weiduan.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/weiduandk.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/weiduandk1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/weizhisd.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/wzlqueding.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/xp_key.txt
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/xunluzhong.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/yuanbao.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/zuola.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/xgs/zuola1.bmp
  • GongShaFuZhu13/【x1】攻沙辅助/攻沙辅助v1.3.exe
    .exe windows:4 windows x86 arch:x86

    963f688e3ccfca5020e281b80e7e2145


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/攻沙辅助v1.3.ini
  • GongShaFuZhu13/【x1】攻沙辅助/更新记录.txt
  • GongShaFuZhu13/【x1】攻沙辅助/辅助保留以前设置更新方法.txt
  • GongShaFuZhu13/【x1】攻沙辅助/辅助浏览器-Browser.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • GongShaFuZhu13/【x1】攻沙辅助/辅助浏览器平台网址.txt
  • GongShaFuZhu13/游迅网.url
    .url
  • GongShaFuZhu13/说明.txt