General

  • Target

    9b6e2a19bc56465bc73df201053501e6

  • Size

    2.0MB

  • MD5

    9b6e2a19bc56465bc73df201053501e6

  • SHA1

    2fbe5eb8f96210b9f2e96f0416c284833b5d4ae7

  • SHA256

    83232b59e34bc7bbbbc7fcc7201214cd82bdcca4d2880105bf05c9e7bf83049f

  • SHA512

    c506aedcf17f8dd4c97119eeb93fe5bccc6dbb9827e0f50ac8dc64faa842b46f68f44b9efee71997dfce55a40c075659c4bba426d64b08556f8af810a8ac2b7e

  • SSDEEP

    49152:vzd11ewWiQH035qelXiWeJ1i3VILA0aohqaM/sCSAQKeLh0sw:J1FWiiw31+1iqLA0pqSTDL2sw

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b6e2a19bc56465bc73df201053501e6
    .rar
  • qmrj-V1.4/SkinH_EL.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • qmrj-V1.4/fei.dat
  • qmrj-V1.4/long.dat
    .zip
  • ma1.dat
  • ma10.dat
  • ma11.dat
  • ma12.dat
  • ma2.dat
  • ma3.dat
  • ma4.dat
  • ma5.dat
  • ma6.dat
  • ma7.dat
  • ma8.dat
  • ma9.dat
  • qmrj-V1.4/pi.she
  • qmrj-V1.4/qian.swf
  • qmrj-V1.4/新云软件.url
    .url
  • qmrj-V1.4/签名截图/党柏林.jpg
    .jpg
  • qmrj-V1.4/签名截图/李政海.jpg
    .jpg
  • qmrj-V1.4/签名截图/林佳良.jpg
    .jpg
  • qmrj-V1.4/签名截图/程林安.jpg
    .jpg
  • qmrj-V1.4/签名截图/蔡边诚.jpg
    .jpg
  • qmrj-V1.4/签名截图/软件截图-2.jpg
    .jpg
  • qmrj-V1.4/签名截图/软件界面2.jpg
    .jpg
  • qmrj-V1.4/签名截图/陈立城.jpg
    .jpg
  • qmrj-V1.4/签名截图/雷文纪.jpg
    .jpg
  • qmrj-V1.4/软件说明.txt
  • qmrj-V1.4/龙飞签名设计.exe
    .exe windows:4 windows x86 arch:x86

    9645cba3fb850f41d5ef331767356188


    Headers

    Imports

    Sections