Overview

overview

3

Static

static

3

DayQQai.exe

windows7-x64

1

DayQQai.exe

windows10-2004-x64

1

EDataStructure.dll

windows7-x64

1

EDataStructure.dll

windows10-2004-x64

1

EThread.dll

windows7-x64

1

EThread.dll

windows10-2004-x64

1

com.dll

windows7-x64

3

com.dll

windows10-2004-x64

3

eDB.dll

windows7-x64

1

eDB.dll

windows10-2004-x64

1

iext3.dll

windows7-x64

1

iext3.dll

windows10-2004-x64

1

krnln.dll

windows7-x64

1

krnln.dll

windows10-2004-x64

1

log/新云软件.url

windows7-x64

1

log/新云软件.url

windows10-2004-x64

1

shellEx.dll

windows7-x64

1

shellEx.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    574872bbe984cc87ef3cc8f746706c70

  • Size

    752KB

  • MD5

    574872bbe984cc87ef3cc8f746706c70

  • SHA1

    3014838354d9f8163a1bf884326adcea59d91e77

  • SHA256

    f36434b1f6b633674ad615ca023668e988d3adee4768b1b28b9dba115af4d4ca

  • SHA512

    0f74a57e34fcbf9cd937554d8051a890ea0a2795d9870b04c463ce347e98b4420c40ce96d84b5c8be15eb78f6ef21c7d8384433b61861c13ba6c0dbf1ecc6553

  • SSDEEP

    12288:Cg9R+LXHB2jV8gzkqXCwoQCCByNyI4Q10rGiL+C0SrTy2Ks2Romifyjro+0:JzyRkVlkqXTuQI71nClWayomHkJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 574872bbe984cc87ef3cc8f746706c70
    .rar
  • DayQQai.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • EDataStructure.fne
    .dll windows:4 windows x86 arch:x86

    b2d34919611ac1e0bb94fd5514550c08


    Headers

    Imports

    Exports

    Sections

  • EThread.fne
    .dll windows:4 windows x86 arch:x86

    62e5db1ba371409d5b2d25cef78e9ce3


    Headers

    Imports

    Exports

    Sections

  • com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • data.ini
  • eDB.fne
    .dll windows:4 windows x86 arch:x86

    7653d067fe85da664e5762a6c78ade23


    Headers

    Imports

    Exports

    Sections

  • gexing.qm
  • iext3.fne
    .dll windows:4 windows x86 arch:x86

    d06ca9724c3c6b11eb22944835d02ae1


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows:4 windows x86 arch:x86

    1021c4a553644f3ae1cb67958917960d


    Headers

    Imports

    Exports

    Sections

  • log/temp.log
  • log/新云软件.url
    .url
  • shellEx.fne
    .dll windows:4 windows x86 arch:x86

    83c5a1bfd08221cfa9c880c04f59a4e7


    Headers

    Imports

    Exports

    Sections

  • syspz.ini
  • system.fne
  • temp.log
  • 使用说明.txt