Overview

overview

3

Static

static

3

VB程序太平洋.exe

windows7-x64

1

VB程序太平洋.exe

windows10-2004-x64

1

qwpchange.exe

windows7-x64

1

qwpchange.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b9dcf5adf16e3e751a723adf69a4487

  • Size

    11KB

  • MD5

    7b9dcf5adf16e3e751a723adf69a4487

  • SHA1

    4d10ba94e0618e0f65e0242058e67eb2ff29fdbb

  • SHA256

    942009a9c3172b3e12b58dafcb520a608dd7219d2e3cf922ead3fd53b5be585f

  • SHA512

    f167c201ed5671ed4e7b2610ac41c20b4992416e33a93e889db36baa1079b1994c4304f111a7950030b57b89da36efe1467741166f9130cccd4a8462289f3ac6

  • SSDEEP

    192:Jce8nBk6JmYvApOQ3Qu4O1co+q6nSnE3vrysGNwpVX4vlXdSt9yrqv8rsFxrOR7m:ye8vJHLQD4O1co+XSnE3vryReV49cXSk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b9dcf5adf16e3e751a723adf69a4487
    .rar
  • VB程序太平洋.EXE
    .exe windows:4 windows x86 arch:x86

    d2649867cedca90066a116140657c3c4


    Headers

    Imports

    Sections

  • qwpchange.exe
    .exe windows:4 windows x86 arch:x86

    ad90d6b6184391fc60947aa2ea9f7396


    Headers

    Imports

    Sections

  • wpchange.bas
  • wpchange.frm
  • wpchange.vbp
  • wpchange.vbw
  • 下载说明.htm
    .html .js polyglot