General

  • Target

    7dc9b63e3820f4a90dc14c7922da8d53

  • Size

    1013KB

  • MD5

    7dc9b63e3820f4a90dc14c7922da8d53

  • SHA1

    35ff01136405d070b3343fdba7d8f329cbb0040d

  • SHA256

    70a3f9f41ac3ae7d93f573cf0de0d0f2ec71bd565619315e81de0c7fdf701f61

  • SHA512

    409d742d877302f5d41778d3fbab9c9ad6920d1fadd43748f9e131d74437db0f015be68bc47d97fc5c3c3346062410033667afc58b2165b0af314faa14a2914d

  • SSDEEP

    12288:qTlzb+AyGdfAJcHoJTztk0YM+m/OJ3rbTF6HLyP8l20j/lNeCRdl2oypkzyWaB+n:as4fwBJYM+mCaLfjN/P83u2WaBC

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7dc9b63e3820f4a90dc14c7922da8d53
    .rar
  • QQfonts/Defaultfont.fot
  • QQfonts/QQ签名软件.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQfonts/QQ签名软件字体编辑器.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • QQfonts/绿盟-首页.url
    .url
  • QQfonts/说明.txt