General

  • Target

    97b0103ee5766b7c8167f820b82f16e3

  • Size

    4.9MB

  • MD5

    97b0103ee5766b7c8167f820b82f16e3

  • SHA1

    9b633feaebeba74a0153622c9dcc087ceef6b7c7

  • SHA256

    8fe12576be728e4158b8d562b7e9b85b985fd231774cedf66dadc0fb764ce048

  • SHA512

    83774b3f2701f5db977f7daf4a3b597f0ab03706c55c11f9cc6f90055bb3bf8b2181bb341b3c2632e024af945684d54c114f8088d211e788e67af3b3fbfd014f

  • SSDEEP

    98304:BcN0sWmZRqd/IcbzyU0s22Z+g4lPcqdg3i83FfYreXocBJO:ebZUHLZ+gQF+FfYGocrO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 97b0103ee5766b7c8167f820b82f16e3
    .zip
  • һͨ3.03B/~$ֽ̳.doc
  • һͨ3.03B/ͨð.txt
  • һͨ3.03B/רBUFF/6.1.flt
  • һͨ3.03B/רBUFF/AccInfo.ini
  • һͨ3.03B/רBUFF/CCProxy.exe
    .exe windows:4 windows x86 arch:x86

    e12a2cfa43de349435cc1fbb8b4efc85


    Headers

    Imports

    Sections

  • һͨ3.03B/רBUFF/CCProxy.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/AccInfo.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/CCProxy.exe
    .exe windows:4 windows x86 arch:x86

    e12a2cfa43de349435cc1fbb8b4efc85


    Headers

    Imports

    Sections

  • һͨ3.03B/רBUFF/CCProxy/CCProxy/CCProxy.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Bulgarian.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/ChineseBig5.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/ChineseGB.chm
    .chm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/ChineseGB.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/English.chm
    .chm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/English.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/French.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/German.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Italian.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Portuguese.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Romanian.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Russian.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Spanish.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/Swedish.ini
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Language/help.chm
    .chm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Log/log20080912.txt
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Log/log20080913.txt
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Log/log20080914.txt
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/Update.exe
    .exe windows:4 windows x86 arch:x86

    7831e47f586c4d9a0612fdd77e3f0886


    Headers

    Imports

    Exports

    Sections

  • һͨ3.03B/רBUFF/CCProxy/CCProxy/unins000.dat
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/unins000.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/cn_acclistadmin.htm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/cn_acclistuser.htm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/en_acclistadmin.htm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/en_acclistuser.htm
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/en_index.html
    .html
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/en_list.htm
    .html
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/en_log.htm
    .html
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/en_settings.htm
    .html .js polyglot
  • һͨ3.03B/רBUFF/CCProxy/CCProxy/web/proxyadmin.php
  • һͨ3.03B/רBUFF/Config.ini
  • һͨ3.03B/רBUFF/Easy2Game.exe.manifest
    .xml
  • һͨ3.03B/רBUFF/Emohao.dll
    .dll windows:4 windows x86 arch:x86

    c8bf43826d3943b2eea961ec88d9c3f0


    Headers

    Imports

    Exports

    Sections

  • һͨ3.03B/רBUFF/Event.log
  • һͨ3.03B/רBUFF/HA-WPE[1].Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/WPE PRO.exe
    .exe windows:4 windows x86 arch:x86

    98b100e2a4307f647d34623b73d03cf7


    Headers

    Imports

    Sections

  • һͨ3.03B/רBUFF/HA-WPE[1].Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/WpeSpy.dll
    .dll windows:4 windows x86 arch:x86

    c8bf43826d3943b2eea961ec88d9c3f0


    Headers

    Imports

    Exports

    Sections

  • һͨ3.03B/רBUFF/HA-WPE[1].Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/˵(En).txt
  • һͨ3.03B/רBUFF/HA-WPE[1].Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/˵().txt
  • һͨ3.03B/רBUFF/HA-WPE[1].Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/HA-WPE.Pro0.9F-Snoopy/˵.txt
  • һͨ3.03B/רBUFF/Language/Bulgarian.ini
  • һͨ3.03B/רBUFF/Language/ChineseBig5.ini
  • һͨ3.03B/רBUFF/Language/ChineseGB.chm
    .chm
  • һͨ3.03B/רBUFF/Language/ChineseGB.ini
  • һͨ3.03B/רBUFF/Language/English.chm
    .chm
  • һͨ3.03B/רBUFF/Language/English.ini
  • һͨ3.03B/רBUFF/Language/French.ini
  • һͨ3.03B/רBUFF/Language/German.ini
  • һͨ3.03B/רBUFF/Language/Italian.ini
  • һͨ3.03B/רBUFF/Language/Portuguese.ini
  • һͨ3.03B/רBUFF/Language/Romanian.ini
  • һͨ3.03B/רBUFF/Language/Russian.ini
  • һͨ3.03B/רBUFF/Language/Spanish.ini
  • һͨ3.03B/רBUFF/Language/Swedish.ini
  • һͨ3.03B/רBUFF/Language/help.chm
    .chm
  • һͨ3.03B/רBUFF/Log/log20080912.txt
  • һͨ3.03B/רBUFF/Log/log20080913.txt
  • һͨ3.03B/רBUFF/Log/log20080914.txt
  • һͨ3.03B/רBUFF/RegEnv.exe
    .exe windows:4 windows x86 arch:x86

    fc78ae0d69d34b7eeb728f17d8cb5a3d


    Headers

    Imports

    Sections

  • һͨ3.03B/רBUFF/UnInstall.exe
    .exe windows:4 windows x86 arch:x86

    adac3f3ed8ee1cb425ccd0fec5919b7d


    Headers

    Imports

    Sections

  • һͨ3.03B/רBUFF/Update.exe
    .exe windows:4 windows x86 arch:x86

    7831e47f586c4d9a0612fdd77e3f0886


    Headers

    Imports

    Exports

    Sections

  • һͨ3.03B/רBUFF/W-P-E޸İ.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • һͨ3.03B/רBUFF/WpASpy.dll
    .dll windows:4 windows x86 arch:x86

    c8bf43826d3943b2eea961ec88d9c3f0


    Headers

    Imports

    Exports

    Sections

  • һͨ3.03B/רBUFF/data/Lang
  • һͨ3.03B/רBUFF/data/ServerData
  • һͨ3.03B/רBUFF/data/data.dat
  • һͨ3.03B/רBUFF/data/data00
  • һͨ3.03B/רBUFF/data/data01
  • һͨ3.03B/רBUFF/data/data10
  • һͨ3.03B/רBUFF/data/data11
  • һͨ3.03B/רBUFF/data/data20
  • һͨ3.03B/רBUFF/data/data30
  • һͨ3.03B/רBUFF/data/data_bak
  • һͨ3.03B/רBUFF/unins000.dat
  • һͨ3.03B/רBUFF/unins000.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • һͨ3.03B/רBUFF/web/cn_acclistadmin.htm
  • һͨ3.03B/רBUFF/web/cn_acclistuser.htm
  • һͨ3.03B/רBUFF/web/en_acclistadmin.htm
  • һͨ3.03B/רBUFF/web/en_acclistuser.htm
  • һͨ3.03B/רBUFF/web/en_index.html
    .html
  • һͨ3.03B/רBUFF/web/en_list.htm
    .html
  • һͨ3.03B/רBUFF/web/en_log.htm
    .html
  • һͨ3.03B/רBUFF/web/en_settings.htm
    .html .js polyglot
  • һͨ3.03B/רBUFF/web/proxyadmin.php
  • һͨ3.03B/רBUFF/EG.exe
    .exe windows:4 windows x86 arch:x86

    9d022dc8280dc8f224c78e616f87a6b3


    Headers

    Imports

    Exports

    Sections

  • һͨ3.03B/ֽ̳.doc
    .doc windows office2003