General

  • Target

    57db4c9aa2fded08f9e955ac86ad9eae

  • Size

    745KB

  • MD5

    57db4c9aa2fded08f9e955ac86ad9eae

  • SHA1

    191197dfbd06b68bac8fe8a25af46d966017820f

  • SHA256

    4fccbf7c4f8e00964e4ca9f4ed069c6f51882c91e38d4d1f58886d3b6bc77d28

  • SHA512

    6b6b548c19ec6c40a1ce7a10c87004508c40aba6f5e240bb10a31bc68bcf4e266288d5bb016c336818d64f14d3d8d7d680e1cef1fff05d42bb428ade59e1818d

  • SSDEEP

    12288:lVkV5FdD0BufVh76zOkTVrznGAa1E3iZAtu+FcczCwkKmjkc243Jv2vEfvAg:lVkp50BMUqYVrTfTum7pk/Yc2CovEfv7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 57db4c9aa2fded08f9e955ac86ad9eae
    .rar
  • cvery.com/Consts.dcu
  • cvery.com/FAVORITES.ico
  • cvery.com/Flash.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1cd3d89be41dd651b02dd66afd312a7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cvery.com/FlashPlayer.cfg
  • cvery.com/FlashPlayer.dof
  • cvery.com/FlashPlayer.dpr
  • cvery.com/FlashPlayer.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • cvery.com/FlashPlayer.res
  • cvery.com/MainUnit.dcu
  • cvery.com/MainUnit.ddp
  • cvery.com/MainUnit.dfm
  • cvery.com/MainUnit.pas
  • cvery.com/ShockwaveFlashObjects_TLB.dcu
  • cvery.com/ShockwaveFlashObjects_TLB.pas
  • cvery.com/delTemp.bat
  • cvery.com/下载说明.htm
    .html .js polyglot