General

  • Target

    64122d5a54d8bfe56f29c231930030d4

  • Size

    4.5MB

  • MD5

    64122d5a54d8bfe56f29c231930030d4

  • SHA1

    25b82b969fee033324a0d892e04da357fa9855af

  • SHA256

    7daf79cf0222547448c94e85cb2190b7ec0ee7306ee4aee8884059778085c85c

  • SHA512

    e4ac7aae65a131010e6f47255bff96834843b7f11dd6c25f32c881ba5e88936ac2a88491ab6f9f29b999e292cf717aeab020598948ab2d026d92e761b5c66673

  • SSDEEP

    98304:MKLoCmGCKIjsxkVDtMWk4kRtfJvVcHyg3cs4S7IV1xSd/Mfe:MTcCVjs2VDNMR/vjg3Wjc+e

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 64122d5a54d8bfe56f29c231930030d4
    .rar
  • config.ini
  • data/jjxmcdata.db
  • data/下载说明.htm
    .html .js polyglot
  • data/新云软件.url
    .url
  • dbctrs8.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d26e52d8913fadc8bca9cec8f97b1019


    Headers

    Imports

    Exports

    Sections

  • dbeng8.exe
    .exe windows:4 windows x86 arch:x86

    b8d16fa6ce45e76cf8a9ccf7537ef0be


    Headers

    Imports

    Sections

  • dblgen8.dll
    .dll windows:4 windows x86 arch:x86

    46039de89f8560750f5a6dacd1c7a453


    Headers

    Imports

    Exports

    Sections

  • dbodbc8.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    445fd4c0f473de5cb49256f48e6d4e36


    Headers

    Imports

    Exports

    Sections

  • dbserv8.dll
    .dll windows:4 windows x86 arch:x86

    8db84d09f3768e784610f35bd072de64


    Headers

    Imports

    Exports

    Sections

  • dbsrv8.exe
    .exe windows:4 windows x86 arch:x86

    6c26855a3b500ca60f2aa033688eecaf


    Headers

    Imports

    Sections

  • img/A18.ico
  • img/Thumbs.db
  • img/but.skn
  • img/p_lnext.gif
    .gif
  • img/p_lprve.gif
    .gif
  • img/p_next.gif
    .gif
  • img/p_prve.gif
    .gif
  • img/ss.bmp
  • img/wall.jpg
    .jpg
  • img/z.skn
  • img/下载说明.htm
    .html .js polyglot
  • img/新云软件.url
    .url
  • libjcc.dll
    .dll windows:4 windows x86 arch:x86

    1cacbb27831291b59a06f22fb24e8d69


    Headers

    Imports

    Exports

    Sections

  • libjsybheap.dll
    .dll windows:4 windows x86 arch:x86

    cd185ae96e493c13224d6c93f6fa483f


    Headers

    Imports

    Exports

    Sections

  • pbdwe90.dll
    .dll windows:4 windows x86 arch:x86

    fb3b7be20a4ce05851e677ac5baab3bb


    Headers

    Imports

    Exports

    Sections

  • pbodb90.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa64be08da43561d7c95ea09f0762a09


    Headers

    Imports

    Exports

    Sections

  • pbvm90.dll
    .dll windows:4 windows x86 arch:x86

    4ef9f03e71767ed812c5dece40984514


    Headers

    Imports

    Exports

    Sections

  • pbweb90.dll
    .dll windows:4 windows x86 arch:x86

    2b313495a2164dca2519cc2ee87fd901


    Headers

    Imports

    Exports

    Sections

  • xmccw.pbw
  • xmcmis.dll
    .dll windows:1 windows x86 arch:x86

    25300999c1aaf3283704242453faf237


    Headers

    Imports

    Exports

    Sections

  • xmcmis.exe
    .exe windows:1 windows x86 arch:x86

    699035716eff0f4cbc45b97c4ff099a5


    Headers

    Imports

    Sections

  • xmcmis.pbl
    .vbs
  • xmcmis.pbt
  • 下载说明.htm
    .html .js polyglot
  • 新云软件.url
    .url