General

  • Target

    737c7ac72651e742a1f4761d0bc9ee99

  • Size

    3.4MB

  • MD5

    737c7ac72651e742a1f4761d0bc9ee99

  • SHA1

    98d312ce374dac1fee0258b7363ec13506504dc1

  • SHA256

    50601b3dc801e47044eb4b64c5fe20db6dd80e4e6e78d128ab95cc3535e1bdd9

  • SHA512

    2ba341db8c626695b6a221dd6678db38a93fba7e882481beb2f203131aa486daaad3c0fc2d711d963618a82ebab8ab50a3c551dfdcd253bf8342e3965ae561ca

  • SSDEEP

    98304:RzYQF0i5Rp31TuhVIB0jf6eTdTyJc+RSvuJ1r:dfOSpFTum0jrTkZYm7r

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 737c7ac72651e742a1f4761d0bc9ee99
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/Daishu Network/Daishu/bin/wizard/UserDirectory.ico
  • $APPDATA/Kanbox Network/Kanbox/shellext/SyncStatOverlays/icons/errors.ico
  • $APPDATA/Kanbox Network/Kanbox/shellext/SyncStatOverlays/icons/synced.ico
  • $APPDATA/Kanbox Network/Kanbox/shellext/SyncStatOverlays/icons/syncing.ico
  • $APPDATA/Kanbox Network/Kanbox/shellext/SyncStateExt.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    b340c19659c56c7136fe064ab7944ffc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $APPDATA/Kanbox Network/Kanbox/shellext/SyncStateExtX64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    c995ebed3f75a3ebb8dafbabfa72d263


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    fb1aa2bbc159c94cb45792330366bd5f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProc.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    6aac02222a7107798e494b35d1b0b7d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Processes.dll
    .dll windows:5 windows x86 arch:x86

    eaa5f91829171a65db414b9e64ec9548


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/update.bmp
  • $PLUGINSDIR/update.ini
  • CrashReporter.dll
    .dll windows:5 windows x86 arch:x86

    989c00ed3b1e48eafdea6aed46e332d4


    Headers

    Imports

    Exports

    Sections

  • CrashReporterSilent.exe
    .exe windows:5 windows x86 arch:x86

    084700d3b5370566356cfb3f541b5a9e


    Headers

    Imports

    Sections

  • Kanbox.exe
    .exe windows:5 windows x86 arch:x86

    c74ebeab48420c50d544326118dc368a


    Code Sign

    Headers

    Imports

    Sections

  • KanboxPropSheetExt.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    895bc393fdd9a3f5a4d05f6f08e52f19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KanboxPropSheetExtX64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    c1c935d5410aa7b434e6e5a4a7016c7a


    Headers

    Imports

    Exports

    Sections

  • LiveUpdater.exe
    .exe windows:5 windows x86 arch:x86

    f7519f78a52d151f94068d7089a7b81c


    Code Sign

    Headers

    Imports

    Sections

  • Locales/zh-CN.dll
    .dll windows:5 windows x86 arch:x86

    017bedb7c245d6db216a4e5e6b73062f


    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
    .xml
  • Resources/zh-CN/Images/UserDirectory.ico
  • Resources/zh-CN/Images/about.png
    .png
  • Resources/zh-CN/Images/after_login.png
    .png
  • Resources/zh-CN/Images/before_login.png
    .png
  • Resources/zh-CN/Images/btn_bg.bmp
  • Resources/zh-CN/Images/finishex.png
    .png
  • Resources/zh-CN/Images/login.png
    .png
  • Resources/zh-CN/Images/menu-icon.png
    .png
  • Resources/zh-CN/Images/package.png
    .png
  • Resources/zh-CN/Images/register.png
    .png
  • Resources/zh-CN/Images/step_1.png
    .png
  • Resources/zh-CN/Images/step_2.png
    .png
  • Resources/zh-CN/Images/step_3.png
    .png
  • Resources/zh-CN/Images/step_4.png
    .png
  • Resources/zh-CN/Images/step_5.png
    .png
  • Resources/zh-CN/Images/step_6.png
    .png
  • Resources/zh-CN/Images/taskbar_notify.png
    .png
  • auctl.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    2d044554ff99967009324c92b17769f4


    Headers

    Imports

    Exports

    Sections

  • cvt.exe
    .exe windows:5 windows x86 arch:x86

    5600c8d7067a24d77b41d7517bb272f4


    Code Sign

    Headers

    Imports

    Sections

  • disk_cache.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    019ef65c59a3342bbbadbfe39f0b2ab1


    Headers

    Imports

    Exports

    Sections

  • down_surf.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    650ad19786d7516354d33bdddd9a570f


    Headers

    Imports

    Exports

    Sections

  • framework.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    642cef0a87828d470f1e652d34b45d9e


    Headers

    Imports

    Exports

    Sections

  • job_dispatcher.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    c95e04c86ef024c4af80bb69d79ae7cc


    Headers

    Imports

    Exports

    Sections

  • mg.dll
    .dll windows:5 windows x86 arch:x86

    5d31e86d2b612aa33ddbb8bb077e0a4f


    Headers

    Imports

    Exports

    Sections

  • msvcm90.dll
    .dll windows:5 windows x86 arch:x86

    2e705c0231c4d814c2d2191566905482


    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • netproxy.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    42c6bb1e990e5f4413faea56bbc03c06


    Headers

    Imports

    Exports

    Sections

  • p2sp_manager.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    70b22d43e6e7b94bc93b2a2a94eabf46


    Headers

    Imports

    Exports

    Sections

  • rpt.dll
    .dll windows:5 windows x86 arch:x86

    e68c0ae4c31b6bed656283efe1fb371c


    Headers

    Imports

    Exports

    Sections

  • stat.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    4df8e4bc87650c962766d18f95b80085


    Headers

    Imports

    Exports

    Sections

  • syncbox.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    861b1c8a8c1805f8dd8a912439d85179


    Headers

    Imports

    Exports

    Sections

  • sys_mon.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d941317bf1521f4f69aa51fbc5c26980


    Headers

    Imports

    Exports

    Sections

  • token_id.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    9469829ccb51550a70a03a8ffa13ef40


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • zlib1.dll
    .dll windows:5 windows x86 arch:x86

    e8fcd924004be61375969e3c785cbe33


    Headers

    Imports

    Exports

    Sections