General

  • Target

    86f6a2238b9adaa18001de6496b1fca3

  • Size

    18.6MB

  • MD5

    86f6a2238b9adaa18001de6496b1fca3

  • SHA1

    c294a2af23c5ddf40e7da24d19207ffef6f4f6fc

  • SHA256

    4381902e014623740cf01e659fce422ad2c2ffd4dcf491be648b4b4cf4f0f7ec

  • SHA512

    dca541aa4c4c90b32a63aef6f05ced15c44c8bd9f687514a43627f022b5cb67de579ea3d3cbc797bcf5cea4133cea6cd872d2338459d43ee079d4f0029142784

  • SSDEEP

    393216:H+s5+tMVHUYVT1a2tE0kuxocJYTUfuXwpdSe1zhQ57elZQ6dVS:es5KYVTXtE0kuzhfuIdSWzhSIQ6dVS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 86f6a2238b9adaa18001de6496b1fca3
    .rar
  • qq2006beta2sp1full.exe
    .exe windows:4 windows x86 arch:x86

    7d8c16ee511989dba08d838c22062a91


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    3764e6c387ce3c76b39936a24d523dce


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    97c84efb92e9e74c911abc996572ac5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ProcDll.dll
    .dll windows:4 windows x86 arch:x86

    43cb19e13cee91d5121d63e700635d50


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SysVer.dll
    .dll windows:4 windows x86 arch:x86

    7f736ff6092c9a62e9f4fa50c98264ac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/VerDll.dll
    .dll windows:4 windows x86 arch:x86

    ef884a06cb2ac4b01896bde30f9a6785


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/iotemp.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $R0
    .dll regsvr32 windows:4 windows x86 arch:x86

    86d1193041c7263e681a114167bc7fbf


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    a7a98f9c2f55921feb823b6f7e5ce74f


    Headers

    Imports

    Exports

    Sections

  • $_33_/Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • $_33_/Security.dll
    .dll windows:4 windows x86 arch:x86

    768cd33515ce32bf57e4e541b585b212


    Headers

    Imports

    Exports

    Sections

  • $_33_/riched20.dll
    .dll windows:5 windows x86 arch:x86

    b273fadc4482676e5c978e88480e0b9e


    Headers

    Imports

    Exports

    Sections

  • Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • QZone/Mfc42.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    1557eebc6134cee9eb9d0583a2b40341


    Headers

    Imports

    Exports

    Sections

  • Riched32.dll
    .dll windows:5 windows x86 arch:x86

    a7a197727231042d22b24fc8d3f916fb


    Headers

    Imports

    Sections

  • Security.dll
    .dll windows:4 windows x86 arch:x86

    768cd33515ce32bf57e4e541b585b212


    Headers

    Imports

    Exports

    Sections

  • atl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e03cb90450eb0a29d0e4c0d30cad3943


    Headers

    Imports

    Exports

    Sections

  • riched20.dll
    .dll windows:5 windows x86 arch:x86

    b273fadc4482676e5c978e88480e0b9e


    Headers

    Imports

    Exports

    Sections

  • vbscript.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    fb0d686bec70e50106c5a13d0760ef32


    Headers

    Imports

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 非常世纪资源网.url
    .url