General

  • Target

    977448693550bda942841a7319462978

  • Size

    2.5MB

  • MD5

    977448693550bda942841a7319462978

  • SHA1

    5651d4ddec17dace28982665b50b7a9501be1553

  • SHA256

    609d8034afef8a2f55799ec860774e94aaa8062a5107657b69e2253077708e61

  • SHA512

    e453dd1847bf8f53293c35a75efbe794e907b077b5358b1bfc0b116ec035e8efe37454e0336070a9a7424aa928d592af67d86cab3491799914ea4b7d4aafdde3

  • SSDEEP

    49152:2kW2jGWafWnK5k0IF8LobQWNdhR5FoG9aeaqt2jf36NprEFJGtoqs:2kWGVaOnKdI6m7Ndh/FoGl8jSDrEFM2J

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • 977448693550bda942841a7319462978
    .rar
  • 加盟说明.txt
  • 客户端/Barinfo.ini
  • 客户端/Desk.exe
    .exe windows:4 windows x86 arch:x86

    4b48934a560da4896a5c6b0fc1e0eb93


    Headers

    Imports

    Exports

    Sections

  • 客户端/Desk60.dll
    .dll windows:4 windows x86 arch:x86

    b77985c9d832fc1d7feca8cd51f4bf05


    Headers

    Imports

    Exports

    Sections

  • 客户端/DeskExt.dll
    .dll windows:4 windows x86 arch:x86

    adfef928f38b641c03231b6ee756f99f


    Headers

    Imports

    Sections

  • 客户端/ErrInfo.dll
    .dll windows:4 windows x86 arch:x86

    3f87c2077d38660c7bbe024310410333


    Headers

    Imports

    Exports

    Sections

  • 客户端/Image.dll
    .dll windows:4 windows x86 arch:x86

    b7ba7b09efd26333ad5eb0a7c90d8650


    Headers

    Imports

    Exports

    Sections

  • 客户端/Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    113f8eb54d71b1bfc4ab0da03347bad6


    Headers

    Imports

    Sections

  • 客户端/cbbn.bbn
  • 客户端/deskshort.exe
    .exe windows:4 windows x86 arch:x86

    e04ef9465a41b14ee3c61c7e8061135e


    Headers

    Imports

    Sections

  • 客户端/proWatch.dll
    .dll windows:4 windows x86 arch:x86

    de3a78561a87201f9f4f9e671e3022ab


    Headers

    Imports

    Sections

  • 客户端/support.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    854b9eb38d38b4eb1c78a79d8d042ab7


    Headers

    Imports

    Exports

    Sections

  • 客户端/客户端配置说明.txt
  • 客户端/新云软件.url
    .url
  • 控制端/History.usc
  • 控制端/MFC42D.DLL
    .dll windows:4 windows x86 arch:x86

    758f4745f1597b57f518e37f66808aa1


    Headers

    Imports

    Sections

  • 控制端/MFCN42D.DLL
    .dll windows:4 windows x86 arch:x86

    28c47f7c0bf3898bead5ae82687cc452


    Headers

    Imports

    Sections

  • 控制端/MFCO42D.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    89b19682777306e83b39c6d1dc27f181


    Headers

    Imports

    Exports

    Sections

  • 控制端/MSVCP60D.DLL
    .dll windows:4 windows x86 arch:x86

    21dddfd5fe74f22f16363fbf0df78894


    Headers

    Imports

    Exports

    Sections

  • 控制端/MSVCRTD.DLL
    .dll windows:4 windows x86 arch:x86

    aafabb794a4fc88d1217ad6b5bf28840


    Headers

    Imports

    Exports

    Sections

  • 控制端/SerName.ini
  • 控制端/Server.cpp
  • 控制端/Server.ldb
  • 控制端/SvrCTL.exe
    .exe windows:4 windows x86 arch:x86

    8510045d88788d99bb976905525583dd


    Headers

    Imports

    Exports

    Sections

  • 控制端/SvrCTL.exp
  • 控制端/SvrCTL.ilk
  • 控制端/SvrCTL.lib
  • 控制端/SvrCTL.opt
  • 控制端/cbbn.bbn
  • 控制端/list.dat
  • 控制端/list.ddt
  • 控制端/msado15.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    370f0131ab90b9472b45827763d9a064


    Headers

    Imports

    Exports

    Sections

  • 控制端/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    1b1839992700df52b049b87961a724e3


    Headers

    Imports

    Exports

    Sections

  • 控制端/~VC142.tmp
    .exe windows:4 windows x86 arch:x86

    8510045d88788d99bb976905525583dd


    Headers

    Imports

    Exports

    Sections