Overview

overview

3

Static

static

3

lg/新云软件.url

windows7-x64

1

lg/新云软件.url

windows10-2004-x64

1

lg/旅馆�...Fx.dll

windows7-x64

1

lg/旅馆�...Fx.dll

windows10-2004-x64

1

lg/旅馆�...ib.dll

windows7-x64

1

lg/旅馆�...ib.dll

windows10-2004-x64

1

lg/旅馆�...ib.dll

windows7-x64

1

lg/旅馆�...ib.dll

windows10-2004-x64

1

lg/旅馆�...on.dll

windows7-x64

1

lg/旅馆�...on.dll

windows10-2004-x64

1

lg/旅馆�...ck.dll

windows7-x64

1

lg/旅馆�...ck.dll

windows10-2004-x64

1

lg/旅馆�...nt.dll

windows7-x64

1

lg/旅馆�...nt.dll

windows10-2004-x64

1

lg/旅馆�...ne.exe

windows7-x64

1

lg/旅馆�...ne.exe

windows10-2004-x64

1

lg/旅馆�...et.dll

windows7-x64

1

lg/旅馆�...et.dll

windows10-2004-x64

1

lg/旅馆�...05.dll

windows7-x64

1

lg/旅馆�...05.dll

windows10-2004-x64

1

lg/旅馆�...��.exe

windows7-x64

1

lg/旅馆�...��.exe

windows10-2004-x64

1

lg/旅馆�...��.exe

windows7-x64

3

lg/旅馆�...��.exe

windows10-2004-x64

1

lg/旅馆�...��.exe

windows7-x64

1

lg/旅馆�...��.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99e93b8a4a7da3e39da23bb8d4b45c4a

  • Size

    1.2MB

  • MD5

    99e93b8a4a7da3e39da23bb8d4b45c4a

  • SHA1

    4d27446abc18d93e25a135f18fc13afb91521e7e

  • SHA256

    7dfae2d90bac99a882287bb5c841772475e3cb988ab702d4ee22bc4a0720e495

  • SHA512

    42cc9f7aec2aab418b9c3f95df81b9950d79cafdf1fbc3aa49315dda05fa33ab69a993fef2cb6c8b0d151dfdaf5ae1b27ccaae9472b8184d9eaeb553a5d2742d

  • SSDEEP

    24576:N4WgprsF7RuKm38DNb46jAvDHdVjCCaaYd9vpY/qGXkDXSvkHmNbpl:NSykK+ijALdpCdauGEivJFl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 99e93b8a4a7da3e39da23bb8d4b45c4a
    .rar
  • lg/QQ旅馆小黑.txt
  • lg/新云软件.url
    .url
  • lg/旅馆小黑/AboutTime.ini
  • lg/旅馆小黑/FluorineFx.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/Interop.QuartzTypeLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/Jayrock.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/Jayrock.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/Jint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/UpdateOnline.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • lg/旅馆小黑/allCookie.data
  • lg/旅馆小黑/config.ini
  • lg/旅馆小黑/log4net.config
    .xml
  • lg/旅馆小黑/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • lg/旅馆小黑/skincrafter.net-vs2005.dll
    .dll windows:4 windows x86 arch:x86

    cc59c365bc885f06f0cee2d725f51cae


    Headers

    Imports

    Sections

  • lg/旅馆小黑/对时软件.exe
    .exe windows:4 windows x86 arch:x86

    fab24e6236b944ad601e2f8dc6827a5c


    Headers

    Imports

    Sections

  • lg/旅馆小黑/旅馆小黑.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • lg/旅馆小黑/旅馆小黑.exe.config
    .xml
  • lg/旅馆小黑/运行不了点击这文件.exe
    .exe windows:5 windows x86 arch:x86

    c32bbe9fc4a1294318cc1dd7b4d0eea3


    Headers

    Imports

    Sections

  • lg/运行不了请看.txt