General

  • Target

    518a48840fcb06edf95675b5af290dbd

  • Size

    4.0MB

  • MD5

    518a48840fcb06edf95675b5af290dbd

  • SHA1

    7528b09ee810e97237aaf6e62f85306b6434a2fe

  • SHA256

    b2a3efe3b2bdf0716bcfafd690c4b90a8679b2e958131f989ab7e39558459853

  • SHA512

    379e543efe71463446427b9e3b5735a7d9649578ca300ba5e8fa672321e4790dd5e7c7f98de80c28efaf0ab29c73e6ea9f018c1e678fae9ccf3c8f3beef6a8fd

  • SSDEEP

    98304:Cb0QsahpsBax+uCXaqvto/hdx7JMsRwKP6C6:C3sWWkxZCpvtg779Ps

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 518a48840fcb06edf95675b5af290dbd
    .rar
  • ip/DataBase/Font_12.asp
  • ip/DataBase/QQWry.Dat
  • ip/DataBase/说明.txt
  • ip/Inc/Const.asp
    .asp .vbs polyglot
  • ip/Inc/Wh_BmpText.asp
    .vbs
  • ip/Inc/iXs_Char.asp
    .vbs
  • ip/Inc/iXs_Ip.asp
    .vbs
  • ip/Index.asp
    .js
  • ip/IpImg.asp
  • ip/IpImg_Bbs.asp
  • ip/IpInfo.asp
  • ip/Js/iXs_Main.js
    .js
  • ip/Skins/IpImg.bmp
  • ip/Skins/IpImg_000.bmp
  • ip/Skins/Mouse.ani
  • ip/Skins/Style_1.css
  • ip/Skins/bg01.jpg
    .jpg
  • ip/qqIP数据/QQWry.Dat
  • ip/qqIP数据/ShowIP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ip/qqIP数据/说明.txt
  • ip/下载说明.htm
    .html .js polyglot