General

  • Target

    859af36190171d36bc344db46525cfb3

  • Size

    1.2MB

  • MD5

    859af36190171d36bc344db46525cfb3

  • SHA1

    79d725fbc36d37b06abec4f5a8888bebe13b265d

  • SHA256

    dab5e4a73213806815f0225871ceb9838dd08f4ee383a8603c73a04ffa5a5f5b

  • SHA512

    065c3d21116befc145e30300c64cfbe2379709668da74bb57baaeca22dc8bdf82df549623ea33d5f2a65955aeec14b20a3d07468f7c9c0a54e58b355e1038402

  • SSDEEP

    24576:SYTQzbG62QW+h+M0spfD+nXNCApTNqYdBnsIHFXMWBHYOGO3zkoiWY/M:cfKspind75rdRsIlXrBHYDO3zkgYU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • 859af36190171d36bc344db46525cfb3
    .rar
  • Embrace'sKG.RAR
    .7z
  • embrace.nfo
  • keygen.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • HB_DLSetup-v7.0_CZ.EXE
    .exe windows:4 windows x86 arch:x86

    37c0608f24ea4f5b69005df26d5dd626


    Headers

    Imports

    Sections

  • $FAVORITES/ãַ֮.URL
  • $PLUGINSDIR/INSTALLOPTIONS.DLL
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KILLPROCDLL.DLL
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PROGRAM_FILES/Baidu/bar/BaiduBar.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    54464a1eee57bf0b2349bd4dcc931391


    Headers

    Imports

    Exports

    Sections

  • $_14_/QQFace.EXE
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • DLVS.DLL.SLT
    .dll windows:4 windows x86 arch:x86

    41651e50a5e95fc8c5b919d36167f831


    Headers

    Imports

    Exports

    Sections

  • DLVS.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • DeskLock.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • File,Diz.ThX
    .exe windows:4 windows x86 arch:x86

    3c0e70bfa5f73f1f1cef484e2bcb5bf8


    Headers

    Imports

    Sections

  • Lang2052.DAT
    .exe windows:4 windows x86 arch:x86

    d31173ca8ec2d5e26170e3b96a28428f


    Headers

    Imports

    Sections

  • TLDL.DLL.SLT
    .dll windows:4 windows x86 arch:x86

    0320e1532a43ea78c6256e2aef51ea33


    Headers

    Imports

    Exports

    Sections

  • TLDL.EXE.SLT
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 汉化说明.TXT