Resubmissions

12-01-2024 05:35

240112-gactqsgcf6 7

12-01-2024 05:30

240112-f7lx8sfdbm 7

12-01-2024 05:25

240112-f4aqssfcej 7

General

  • Target

    Quest Games Optimizer 9.2.1 -NIF(1).zip

  • Size

    17.7MB

  • MD5

    3d75fc8cd700fab64697eb8357dedbf8

  • SHA1

    e2f4360f7bc0bf78acdd4e5beb7f8667480be30f

  • SHA256

    a1d303b353df28ed366a8fc944d93cacf25f328d63e2b95c30b188410a6894df

  • SHA512

    f2baecdf7b6cbcec1e40a626a8845bed4994a1994d670fd9acda74ed0bbc3ab8844421b002531c97e34acc3cb938e5e45948869bad93a6fc6a60cac897169371

  • SSDEEP

    393216:gOugtpTm5/sUOaaegtMnYjRtkpkmMbRlV8+sgtvz9BZpuS:zLpTzPhMe8kPlegpBPN

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 4 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Quest Games Optimizer 9.2.1 -NIF(1).zip
    .zip
  • adb/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    776334619bd19ec23e3a7a275473b5a7


    Headers

    Imports

    Exports

    Sections

  • adb/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    72b8c869f01047191838df5f58e88dd8


    Headers

    Imports

    Exports

    Sections

  • adb/adb.exe
    .exe windows:6 windows x86 arch:x86

    e6e69030c3a33898b09715b432c51499


    Headers

    Imports

    Exports

    Sections

  • com.anagan.qgp.apk
    .apk android arch:arm64

    com.anagan.qgo

    com.anagan.qgo.SplashScreenActivity


  • huiziyuan.net.url
  • 全自动安装.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • 手动安装说明.txt