Overview

overview

7

Static

static

7

QQ游戏�....2.exe

windows7-x64

7

QQ游戏�....2.exe

windows10-2004-x64

7

patch.dll

windows7-x64

1

patch.dll

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    6583c9cf419715e5d946489caf7859ba

  • Size

    434KB

  • MD5

    6583c9cf419715e5d946489caf7859ba

  • SHA1

    7dd659349efe66addc583e0d9e5eaf1d67d74173

  • SHA256

    a46575218dd70aae739ef11f1d1a1f1c020c7025ad26e1f8862ebc265d958808

  • SHA512

    c551290d1f1e963cc05706c9c8683d09b39a6c6b6d0fa3c3fe7d78cf1f7180e9ebf3dac1a28b707862e803e7d9fb1910457517007dbfe9964b9fb7361439cff1

  • SSDEEP

    12288:hdYdcQb3+jaAT65H3xo6a07Cyuflbs540iaWp:MdZuh8b/+No540ia4

Score
7/10
aspackv2themida

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6583c9cf419715e5d946489caf7859ba
    .rar
  • QQ游戏大厅多开显隐身版V1.2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • patch.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新云软件.url
    .url