General

  • Target

    9ae18c812da601dd9c8f9b75483d90e3

  • Size

    734KB

  • MD5

    9ae18c812da601dd9c8f9b75483d90e3

  • SHA1

    4aaf1a25b87ab8c6c340312fb239336c7bc96cc2

  • SHA256

    01e731d680c8d21e80483f65369ded7b589734a02f1bb2dda184ba04ec75c8c0

  • SHA512

    873d4d8312d1d3f25c37773d5a72ecbb72e156a217b661a0606a05b1090c00ffd22ee8638d1494484a2ab4f60aef0e4cbe6b184083a7edfc8c3fd0c5025951dd

  • SSDEEP

    12288:oxNQoOOnSynsVjYEIVtqcjspjziaG0bwrqJNVUKQ7KBMpDNf0cEU+UImBwWb4i:quRknGjY9VtLQpjzSQNVxsAbUImBwO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ae18c812da601dd9c8f9b75483d90e3
    .rar
  • QQbm.exe
    .exe windows:4 windows x86 arch:x86

    5d4689ccfb01607c96f37a814402ab54


    Headers

    Imports

    Sections

  • config/CropConfig.xml
    .xml
  • config/QQBmUpdate.exe
    .exe windows:5 windows x86 arch:x86

    1c6f86530eb04f09e1f99148fb507014


    Headers

    Imports

    Sections

  • config/animalConfig.xml
    .xml
  • config/setting.xml
    .xml
  • config/user.xml
    .xml
  • config/version.ini
  • config/新云软件.url
    .url
  • config/本目录下的文件不能删除,否则程序会出错.txt