Overview

overview

7

Static

static

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

魔方手�...��.exe

windows7-x64

3

魔方手�...��.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/libeay32.dll

windows7-x64

1

$SYSDIR/libeay32.dll

windows10-2004-x64

1

$SYSDIR/ssleay32.dll

windows7-x64

1

$SYSDIR/ssleay32.dll

windows10-2004-x64

1

$SYSDIR/zlib1.dll

windows7-x64

3

$SYSDIR/zlib1.dll

windows10-2004-x64

3

MoFunMobileMail.dll

windows7-x64

7

MoFunMobileMail.dll

windows10-2004-x64

7

SysSetHelper.exe

windows7-x64

7

SysSetHelper.exe

windows10-2004-x64

7

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

ħ�...��.doc

windows7-x64

4

ħ�...��.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a369dca05ddea524b68a68e0b9fea178

  • Size

    2.5MB

  • MD5

    a369dca05ddea524b68a68e0b9fea178

  • SHA1

    50f60aaacb2c09f1b73f9dcf57106ba9770844fd

  • SHA256

    77a67a6e452f9b34b0e86c1fb36a530a8e1d889985f49013baeb2bcf32ebe125

  • SHA512

    0449f453741a6a2635d34c5cd033423279bb859d853d15cbecf6ac5a5e217301ab229e3555d2616c412ade8038051207ca642e0787eae65a6aa2d53dc1281b0b

  • SSDEEP

    49152:t2uDiO6PwCaaCn0fEm4T6y81h2o5m7QJmSjFYOD8idUNmnLu0lJUDuir6q:HDf64lgFU6y81hl9DDCmLfOuSj

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs
    installer

Files

  • a369dca05ddea524b68a68e0b9fea178
    .rar
  • 新云软件.url
    .url
  • 魔方手机邮箱接入平台.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/libeay32.dll
    .dll windows:4 windows x86 arch:x86

    75e4a91d721ddc0f2a64314ac46cea9e


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/ssleay32.dll
    .dll windows:4 windows x86 arch:x86

    dc1050b3eab0796d996cc04188855a74


    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/zlib1.dll
    .dll windows:4 windows x86 arch:x86

    58ebe63bde2e8d9e022f7f601830ac71


    Headers

    Imports

    Exports

    Sections

  • MoFunMobileMail.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • SysSetHelper.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • cfg.xml
  • data/db.db
  • info.ini
  • ħֻƽ̨ʹð.doc
    .doc windows office2003