General

  • Target

    54a09f3a1e790806357f53cada3c2e25

  • Size

    2.1MB

  • MD5

    54a09f3a1e790806357f53cada3c2e25

  • SHA1

    6a125db06f7e0ab2623815163748868f51cb33cb

  • SHA256

    fe75495f9c9818e98b94b46f79bce2d4df1a8d80821440be467204b3a6f73afd

  • SHA512

    ec36ff0ec1023de996180988ffd701333da3560f38bca601ccacb5483f07202626abdcd545b573f3f01c8f2cc9663980b19779b17b80bffb0fc2237010c7679b

  • SSDEEP

    49152:GzYL7m3CIwoO0GS1UH6d+lsVaV0ZrJFaifki+V37jahTYM8g7C:GO7m3Y0kTsVo019fki+ZPatZ8B

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 54a09f3a1e790806357f53cada3c2e25
    .rar
  • CQQCfg.exe
    .exe windows:4 windows x86 arch:x86

    f573deccd28849de99a34b38c86cff6e


    Headers

    Imports

    Sections

  • CoralQQ.dll
    .dll windows:4 windows x86 arch:x86

    73fb0d6f03784f1147ef13ef9ecf9e01


    Headers

    Imports

    Exports

    Sections

  • CoralQQ.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • CoralQQ.ini
  • CoralQQ98.exe
    .exe windows:4 windows x86 arch:x86

    19856e6e5de43641bb2faee7a31c0748


    Headers

    Imports

    Sections

  • History.txt
  • MyIP.dat
  • QQWry.Dat
  • Readme.txt
  • Version.ini
  • cqchat.dll
    .dll windows:4 windows x86 arch:x86

    97ad3c35a434e37448077d9364d62d38


    Headers

    Imports

    Exports

    Sections

  • detoured.dll
    .dll windows:4 windows x86 arch:x86

    6c8408bb5d7d5a5b75b9314f94e68763


    Headers

    Imports

    Exports

    Sections

  • ipsearcher.dll
    .dll windows:4 windows x86 arch:x86

    bcbc4703c59d2fd0161de0cbcb4074fe


    Headers

    Imports

    Exports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • qqldrfmt.dll
    .dll windows:4 windows x86 arch:x86

    f6cf3afc199b541d2b156eff3ab44b02


    Headers

    Imports

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot