General

  • Target

    524dc433813bd7a9c122591178df56c7

  • Size

    498KB

  • MD5

    524dc433813bd7a9c122591178df56c7

  • SHA1

    c5585351b865bd5e43c64991ebf95137d5e1ee95

  • SHA256

    00957f76b548ca024b8d323fa1cac1a88cce3c39921c15fe92dbff726d59dbb5

  • SHA512

    f0c6854368c9f46f19ed00ba04ddabd256d57a8bfd44195caca33bfd5da67815e4669e147174de61519f524ce7b64f75bc8172f8ecd7c12b902c182c0c5be11a

  • SSDEEP

    12288:iTV8zITCH/wMwETHT2qKTJNT/Dmoc1OJJB9OTsOn48EH:iTqcyAjWlWEz4ZH

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 524dc433813bd7a9c122591178df56c7
    .rar
  • FMail/Lib/ADOLIB/ADOConnection.cpp
    .js
  • FMail/Lib/ADOLIB/ADOConnection.h
  • FMail/Lib/ADOLIB/ADODataset.cpp
    .js
  • FMail/Lib/ADOLIB/ADODataset.h
    .vbs
  • FMail/Lib/ADOLIB/ADOException.h
  • FMail/Lib/ADOLIB/ADOLib.dsp
  • FMail/Lib/ADOLIB/ADOLib.dsw
  • FMail/Lib/ADOLIB/ADOLib.plg
    .html
  • FMail/Lib/ADOLIB/ADOObject.cpp
  • FMail/Lib/ADOLIB/ADOObject.h
  • FMail/Lib/ADOLIB/AdoLib.h
  • FMail/Lib/ADOLIB/TimeEx.cpp
    .js
  • FMail/Lib/ADOLIB/TimeEx.h
  • FMail/Lib/ADOLIB/VariantEx.cpp
    .js
  • FMail/Lib/ADOLIB/VariantEx.h
  • FMail/Lib/NetLib/Mutex.h
  • FMail/Lib/NetLib/NetAddress.h
  • FMail/Lib/NetLib/NetException.h
  • FMail/Lib/NetLib/NetLibD.def
  • FMail/Lib/NetLib/NetLibD.dsp
  • FMail/Lib/NetLib/NetLibD.dsw
  • FMail/Lib/NetLib/NetLibD.rc
  • FMail/Lib/NetLib/Resource.h
  • FMail/Lib/NetLib/SafeVector.cpp
    .js
  • FMail/Lib/NetLib/SafeVector.h
  • FMail/Lib/NetLib/Socket.h
  • FMail/Lib/NetLib/StdAfx.cpp
  • FMail/Lib/NetLib/StdAfx.h
  • FMail/Lib/NetLib/Thread.h
  • FMail/Lib/NetLib/ThreadStorage.h
  • FMail/Lib/NetLib/Threads/FileRecvorThread.h
  • FMail/Lib/NetLib/Threads/FileSenderThread.h
  • FMail/Lib/NetLib/Threads/Package.h
  • FMail/Lib/NetLib/XFile.h
  • FMail/Lib/NetLib/res/NetLibD.rc2
  • FMail/Lib/NetLib/stdNetApi.h
  • FMail/Lib/System/System.dsp
  • FMail/Lib/System/System.dsw
  • FMail/Lib/System/author.c
  • FMail/Lib/System/author.h
  • FMail/Lib/System/d3des.c
  • FMail/Lib/System/d3des.h
  • FMail/Lib/System/passwrd.h
  • FMail/Lib/System/vnclog.cpp
  • FMail/Lib/System/vnclog.h
  • FMail/Lib/msado15.dll
    .dll regsvr32 windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • FMail/bin/NetLibD.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FMail/bin/NetLibD.lib
  • FMail/bin/trfAgent.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FMail/bin/trfSever.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FMail/document/数据库脚本.sql
  • FMail/document/数据库设计说明.doc
    .doc windows office2003
  • FMail/public/DropFiles.cpp
  • FMail/public/DropFiles.h
  • FMail/public/Shortcut.cpp
  • FMail/public/Shortcut.h
  • FMail/public/TrayIcon.cpp
  • FMail/public/TrayIcon.h
  • FMail/public/sqlstr.h
  • FMail/public/trfPublic.h
  • FMail/trfAgent/AppInstance.cpp
    .js
  • FMail/trfAgent/AppInstance.h
  • FMail/trfAgent/CCHelper.cpp
  • FMail/trfAgent/CCHelper.h
  • FMail/trfAgent/CSHelper.cpp
    .js
  • FMail/trfAgent/CSHelper.h
  • FMail/trfAgent/ConfigEnv.cpp
  • FMail/trfAgent/ConfigEnv.h
  • FMail/trfAgent/ConfigNetwork.cpp
  • FMail/trfAgent/ConfigNetwork.h
  • FMail/trfAgent/ConfigSysView.cpp
  • FMail/trfAgent/ConfigSysView.h
  • FMail/trfAgent/FileListRecv.cpp
    .js
  • FMail/trfAgent/FileListRecv.h
  • FMail/trfAgent/FileNameInputDlg.cpp
  • FMail/trfAgent/FileNameInputDlg1.cpp
  • FMail/trfAgent/FileRenameDlg.cpp
  • FMail/trfAgent/FileRenameDlg.h
  • FMail/trfAgent/FileTransFrame.cpp
  • FMail/trfAgent/FileTransFrame.h
  • FMail/trfAgent/FileTransView.cpp
  • FMail/trfAgent/FileTransView.h
  • FMail/trfAgent/FilelistSend.cpp
    .js
  • FMail/trfAgent/FilelistSend.h
  • FMail/trfAgent/GuiADODB.cpp
    .js
  • FMail/trfAgent/GuiADODB.h
  • FMail/trfAgent/LocalUserRenameDlg.cpp
  • FMail/trfAgent/LocalUserRenameDlg.h
  • FMail/trfAgent/MainFrm.cpp
  • FMail/trfAgent/MainFrm.h
  • FMail/trfAgent/MyTree.cpp
  • FMail/trfAgent/MyTree.h
  • FMail/trfAgent/Register.cpp
  • FMail/trfAgent/Register.h
  • FMail/trfAgent/SearchUserDlg.cpp
  • FMail/trfAgent/SearchUserDlg.h
  • FMail/trfAgent/SendGroupMgr.cpp
  • FMail/trfAgent/SendGroupMgr.h
  • FMail/trfAgent/SndGrpRenameDlg.cpp
  • FMail/trfAgent/SndGrpRenameDlg.h
  • FMail/trfAgent/StdAfx.cpp
  • FMail/trfAgent/StdAfx.h
  • FMail/trfAgent/SysLogView.cpp
  • FMail/trfAgent/SysLogView.h
  • FMail/trfAgent/SysUsrLoginDlg.cpp
  • FMail/trfAgent/SysUsrLoginDlg.h
  • FMail/trfAgent/TimeEx.cpp
    .js
  • FMail/trfAgent/TimeEx.h
  • FMail/trfAgent/TreeForGrpSend.cpp
    .js
  • FMail/trfAgent/TreeForGrpSend.h
  • FMail/trfAgent/TreeForHistory.h
  • FMail/trfAgent/TreeForUsers.cpp
    .js
  • FMail/trfAgent/TreeForUsers.h
  • FMail/trfAgent/VariantEx.cpp
    .js
  • FMail/trfAgent/VariantEx.h
  • FMail/trfAgent/WorkFrame.cpp
  • FMail/trfAgent/WorkFrame.h
  • FMail/trfAgent/WorkspaceView.cpp
  • FMail/trfAgent/WorkspaceView.h
  • FMail/trfAgent/XShell.cpp
  • FMail/trfAgent/XShell.h
  • FMail/trfAgent/XTSplitterWnd.cpp
    .vbs
  • FMail/trfAgent/XTSplitterWnd.h
  • FMail/trfAgent/const.h
  • FMail/trfAgent/filenameinputdlg.h
  • FMail/trfAgent/res/ChatImage.bmp
  • FMail/trfAgent/res/Couple.ico
  • FMail/trfAgent/res/DBFiles.dat
  • FMail/trfAgent/res/File.ico
  • FMail/trfAgent/res/Login.ico
  • FMail/trfAgent/res/Mail delete.ico
  • FMail/trfAgent/res/NetConfig.ico
  • FMail/trfAgent/res/PCUser.ico
  • FMail/trfAgent/res/Pc user.ico
  • FMail/trfAgent/res/SysView.bmp
  • FMail/trfAgent/res/Workspace-24.bmp
  • FMail/trfAgent/res/Workspace.bmp
  • FMail/trfAgent/res/controls6.ico
  • FMail/trfAgent/res/dbprojec.bmp
  • FMail/trfAgent/res/error.WAV
  • FMail/trfAgent/res/mail send.ico
  • FMail/trfAgent/res/mainfram.bmp
  • FMail/trfAgent/res/notify.wav
  • FMail/trfAgent/res/splith.cur
  • FMail/trfAgent/res/splitv.cur
  • FMail/trfAgent/res/toolbar1.bmp
  • FMail/trfAgent/res/trfAgent.rc2
  • FMail/trfAgent/res/wave1.bin
  • FMail/trfAgent/resource.h
  • FMail/trfAgent/treeforhistory.cpp
    .js
  • FMail/trfAgent/trfAgent.clw
  • FMail/trfAgent/trfAgent.cpp
  • FMail/trfAgent/trfAgent.dsp
  • FMail/trfAgent/trfAgent.dsw
  • FMail/trfAgent/trfAgent.h
  • FMail/trfAgent/trfAgent.plg
    .html
  • FMail/trfAgent/trfAgent.rc
  • FMail/trfAgent/trfAgentDoc.cpp
  • FMail/trfAgent/trfAgentDoc.h
  • FMail/trfAgent/trfAgentView.cpp
  • FMail/trfAgent/trfAgentView.h
  • FMail/trfServer/AppInstance.cpp
  • FMail/trfServer/AppInstance.h
  • FMail/trfServer/Resource.h
  • FMail/trfServer/Server.bbs
  • FMail/trfServer/Server.clw
  • FMail/trfServer/Server.cpp
    .js
  • FMail/trfServer/Server.dsp
  • FMail/trfServer/Server.dsw
  • FMail/trfServer/Server.h
  • FMail/trfServer/Server.plg
    .html
  • FMail/trfServer/Server.rc
  • FMail/trfServer/ServerDlg.cpp
  • FMail/trfServer/ServerDlg.h
  • FMail/trfServer/Service.cpp
    .js
  • FMail/trfServer/Service.h
  • FMail/trfServer/StdAfx.cpp
  • FMail/trfServer/StdAfx.h
  • FMail/trfServer/res/Server.bmp
  • FMail/trfServer/res/Server.rc2
  • FMail/trfServer/res/服务器-忙.ico
  • FMail/trfServer/res/服务器-正常.ico