General

  • Target

    63b35efb2cc8ac6f6f759a43f81c1f6e

  • Size

    16KB

  • MD5

    63b35efb2cc8ac6f6f759a43f81c1f6e

  • SHA1

    702c1cacf2e5c2b0e605106f181c1f1ef5c3871b

  • SHA256

    d912bc1e51b3f3f609835128ddc7a91e1f0b1944142ec68d125464871cf67228

  • SHA512

    a242c8befaf7ee74e42e24dd5220ee8c6b345bdfae87c0035bc781790b9814535b6935798334d2db7f6a26d6ddafc35557ffd068c888ff7917fa23176da646ea

  • SSDEEP

    384:s6/uRa4XOoABtCfAL59BMAjQujGSW68xEoP+0hJ8whn8ZSF:b/r4XPdfALFjPAHWQD+SF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 63b35efb2cc8ac6f6f759a43f81c1f6e
    .rar
  • Instructions.txt
  • VB程序太平洋.EXE
    .exe windows:4 windows x86 arch:x86

    d2649867cedca90066a116140657c3c4


    Headers

    Imports

    Sections

  • client/Form1.frm
    .vbs
  • client/Project1.vbp
  • client/Project1.vbw
  • client/WsockAPI.bas
    .vbs
  • client/下载说明.htm
    .html .js polyglot
  • server/Form1.frm
    .vbs
  • server/Project1.vbp
  • server/Project1.vbw
  • server/WsockAPI.bas
    .vbs
  • server/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot