General

  • Target

    654fe1a7e6594031639a242e297b53bd

  • Size

    2.2MB

  • MD5

    654fe1a7e6594031639a242e297b53bd

  • SHA1

    4d8116cc6f1e2410e2bc5956c3110dd4cbf4a7c2

  • SHA256

    4a0fba4ec2dd84685109707c33d4b80780ad6929e023b075cfd68258484dcde2

  • SHA512

    179d11b098855c2c00bd7f8c978d8474b4f4edc80fa5be47093f1bb201d126958ea1e97d5a32bc6f084d439429d13ee467b8acf3c2ebc3ab9f4b43abf81b0d2a

  • SSDEEP

    49152:RzYHw6k0ihc3U7lmkegVpl1TuhQuIB0jVObQI2D0eTdTyJf:RzYQF0i5Rp31TuhVIB0jf6eTdTyJf

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 654fe1a7e6594031639a242e297b53bd
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/Daishu Network/Daishu/bin/wizard/UserDirectory.ico
  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    6aac02222a7107798e494b35d1b0b7d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/update.bmp
  • $PLUGINSDIR/update.ini
  • Kanbox.exe
    .exe windows:5 windows x86 arch:x86

    c74ebeab48420c50d544326118dc368a


    Code Sign

    Headers

    Imports

    Sections

  • LiveUpdater.exe
    .exe windows:5 windows x86 arch:x86

    f7519f78a52d151f94068d7089a7b81c


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
    .xml
  • Resources/zh-CN/Images/UserDirectory.ico
  • auctl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    2d044554ff99967009324c92b17769f4


    Headers

    Imports

    Exports

    Sections

  • cvt.exe
    .exe windows:5 windows x86 arch:x86

    5600c8d7067a24d77b41d7517bb272f4


    Code Sign

    Headers

    Imports

    Sections

  • disk_cache.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    019ef65c59a3342bbbadbfe39f0b2ab1


    Headers

    Imports

    Exports

    Sections

  • down_surf.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    650ad19786d7516354d33bdddd9a570f


    Headers

    Imports

    Exports

    Sections

  • framework.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    642cef0a87828d470f1e652d34b45d9e


    Headers

    Imports

    Exports

    Sections

  • job_dispatcher.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c95e04c86ef024c4af80bb69d79ae7cc


    Headers

    Imports

    Exports

    Sections

  • mg.dll
    .dll windows:5 windows x86 arch:x86

    5d31e86d2b612aa33ddbb8bb077e0a4f


    Headers

    Imports

    Exports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • netproxy.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    42c6bb1e990e5f4413faea56bbc03c06


    Headers

    Imports

    Exports

    Sections

  • p2sp_manager.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    70b22d43e6e7b94bc93b2a2a94eabf46


    Headers

    Imports

    Exports

    Sections

  • stat.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4df8e4bc87650c962766d18f95b80085


    Headers

    Imports

    Exports

    Sections

  • syncbox.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    861b1c8a8c1805f8dd8a912439d85179


    Headers

    Imports

    Exports

    Sections

  • sys_mon.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d941317bf1521f4f69aa51fbc5c26980


    Headers

    Imports

    Exports

    Sections

  • token_id.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9469829ccb51550a70a03a8ffa13ef40


    Headers

    Imports

    Exports

    Sections