General

  • Target

    688905c8764473bd3079c944da3b69cf

  • Size

    147KB

  • MD5

    688905c8764473bd3079c944da3b69cf

  • SHA1

    527dbc891f37acea7f3c0a8810da3366f0890cbf

  • SHA256

    af041a870c01107dfa11551ec3d922d0f73aaf89d4a5551f614265d4f7988f8a

  • SHA512

    9cdd83d83bddcaca6af5afb57a0b9058e3475f59a7c40e3a105e1ec5eade8ddfaba27ba8c49fad820f913d7fbf2f31312ed3dc5eee36ae1287398d1f0a03e67e

  • SSDEEP

    3072:Z6RUn3C9AETGFa5nwZUDyDnQhZeuFBhCcWvDsO2:kGny9A5eQbQ+PbsF

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 4 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 688905c8764473bd3079c944da3b69cf
    .rar
  • Magical Glass.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plug-Ins/Grid.dll
    .dll windows:4 windows x86 arch:x86

    c0c482ebc39e72f89fa0bd25d7099ed3


    Headers

    Imports

    Exports

    Sections

  • Plug-Ins/RGB Info.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Plug-Ins/RGB Info.dll.bak
    .dll windows:4 windows x86 arch:x86

    becad48e376ea47ad0a95fb6ba1d430b


    Headers

    Imports

    Exports

    Sections

  • Plug-Ins/下载说明.htm
    .html .js polyglot
  • fggetcaretpos.dll
    .dll windows:4 windows x86 arch:x86

    cf97cc9c985c4a11f864b792525822be


    Headers

    Imports

    Exports

    Sections

  • fghidecursor.dll
    .dll windows:4 windows x86 arch:x86

    dad7a7bfa97190121f1b9a15cd9422b8


    Headers

    Imports

    Exports

    Sections

  • fgmagnifier.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • fgsender.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • license.txt
  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.TXT