General

  • Target

    75179f771ae50bdec9ff348ae7f6e537

  • Size

    3.2MB

  • MD5

    75179f771ae50bdec9ff348ae7f6e537

  • SHA1

    d9ef20c61292bd734e7274a83c82829d2ac3eada

  • SHA256

    300fe6224578b1254a43444f7e1783dd608a6c065d4e6089e7560e719fc787b2

  • SHA512

    d316ca31d4d611a58efc90cde5eb853fe7ccf0b2ba3fb6f28dc8e7918950afb5e30bb9ff66c6262575eb3fa86436b3764257e20c670e0437c7e5935b038d1028

  • SSDEEP

    98304:cc/EcTroA9F73s7dPrMO2jcDrpbDZx9b/n:0cTrXF7cy9cDFJvn

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • 75179f771ae50bdec9ff348ae7f6e537
    .rar
  • About.chm
    .chm
  • Setup_s34.exe
    .exe windows:4 windows x86 arch:x86

    1ac3e2ca29bc84ed42cb8b3ed3ca59f7


    Headers

    Imports

    Sections

  • baid.dll
    .exe windows:5 windows x86 arch:x86

    c56a25fa4336eeb10723b3537ba4876d


    Headers

    Imports

    Sections

  • bind_8152.exe
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • duisc.dll
    .exe windows:4 windows x86 arch:x86

    a3b0ee1fb29253dbfbd34b387e7a55c9


    Headers

    Imports

    Sections

  • edmtd.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • itadx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ly2_03.exe
    .exe windows:4 windows x86 arch:x86

    86057e03f22e7f492f3fdd45c4a17706


    Headers

    Imports

    Sections

  • pcast.dll
    .exe windows:4 windows x86 arch:x86

    4f2145f489d9c324280558d2e08c717d


    Headers

    Imports

    Sections

  • pingtu12.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • qqa02_u88setup.exe
    .exe windows:4 windows x86 arch:x86

    b412db10bd5736fc11f185d00e5df282


    Headers

    Imports

    Sections

  • sdcnc.dll
    .exe windows:4 windows x86 arch:x86

    d31173ca8ec2d5e26170e3b96a28428f


    Headers

    Imports

    Sections

  • sdpig.dll
    .exe windows:4 windows x86 arch:x86

    6617c9973a3016d2e36534a9f0ae1c08


    Code Sign

    Headers

    Imports

    Sections

  • sdreg.exe
    .exe windows:4 windows x86 arch:x86

    2b57ba1b43d59f3545e5d2436a706505


    Headers

    Imports

    Sections

  • sdset.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • sogoutb_setup_pp365sosoft08mini.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsSCM.dll
    .dll windows:4 windows x86 arch:x86

    0897e514cdf3f5ec7b01dec9ae7ce8f3


    Headers

    Imports

    Exports

    Sections

  • $R0
    .exe windows:4 windows x86 arch:x86

    855b471e5f518e7f5d3536c4ff076b8e


    Headers

    Imports

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • wpsdls.8824.10.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot