General

  • Target

    9b562225d910eb6251f077c65c43a769

  • Size

    3.6MB

  • MD5

    9b562225d910eb6251f077c65c43a769

  • SHA1

    e423c451ce31f545c9e6cdbe4a99f4554d72ea29

  • SHA256

    0df07fecb437810b2107073b8bd74fe1786fcbcdc14c15cf23b470f976687e95

  • SHA512

    902c228a6518a0cd080d2424eef1b462457de0c65e78ebd37a71c9b1632ee3d4192437f10dbb673f0e4a18f871891b1a5c8e19760609a22c255a80899a2e9f7b

  • SSDEEP

    49152:BrhuMRn1GwK/ZWR2ym88vwxhy6d1DclfLrX1ht9YuBrap8bujsEwrIbi9r9zIKJP:Duk43yuj6DDSt3rapobEw9rv1oElLN

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 4 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 28 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b562225d910eb6251f077c65c43a769
    .rar
  • Setup_158.exe
    .exe windows:4 windows x86 arch:x86

    1776ef176e821fae67f5fb6eb56cce45


    Headers

    Imports

    Sections

  • free1.snd
  • freesys.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hygd1.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hyie.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hyie1.dat
  • hyie32.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hyuser.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • in124.dll
    .exe windows:5 windows x86 arch:x86

    c56a25fa4336eeb10723b3537ba4876d


    Headers

    Imports

    Sections

  • in125.dll
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • in126.dll
    .exe windows:4 windows x86 arch:x86

    2b57ba1b43d59f3545e5d2436a706505


    Headers

    Imports

    Sections

  • inkt1.dll
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • inkt2.dll
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • inkt3.dll
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    3cda50efa41b17b7a20156056d51b809


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    1f4c4faa2a5228733f7ee5edf40f6693


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsSCM.dll
    .dll windows:4 windows x86 arch:x86

    0897e514cdf3f5ec7b01dec9ae7ce8f3


    Headers

    Imports

    Exports

    Sections

  • $R0
    .exe windows:4 windows x86 arch:x86

    4f57fb89bd1e69c57e3e5575794858bf


    Headers

    Imports

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • inkt4.dll
    .exe windows:4 windows x86 arch:x86

    2e3de5541714db0bbc4103655dd3f331


    Headers

    Imports

    Sections

  • inkt5.dll
    .exe windows:4 windows x86 arch:x86

    1cf4252ebbb4f173d97a6ef4f79a60b5


    Headers

    Imports

    Sections

  • ly2_02.exe
    .exe windows:4 windows x86 arch:x86

    86057e03f22e7f492f3fdd45c4a17706


    Headers

    Imports

    Sections

  • mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    50ccb1d881ea89a41a10cced45c79649


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msetup.exe
    .exe windows:4 windows x86 arch:x86

    6617c9973a3016d2e36534a9f0ae1c08


    Code Sign

    Headers

    Imports

    Sections

  • ocxreg.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ocxreg1.exe
    .exe windows:4 windows x86 arch:x86

    3367c3f95332a18cdbbc6f013db08824


    Headers

    Imports

    Sections

  • setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • streg.dll
    .exe windows:4 windows x86 arch:x86

    1bed3305885b0ca596d9cbba22baf78a


    Headers

    Imports

    Sections

  • vbchs6.dll
    .exe windows:4 windows x86 arch:x86

    4f2145f489d9c324280558d2e08c717d


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot