General
-
Target
a9fca341ce8fcb9da33c098f954f17c8
-
Size
1.9MB
-
MD5
a9fca341ce8fcb9da33c098f954f17c8
-
SHA1
9378b9b499cc8caf71c6f25598d3e8ed6364edb7
-
SHA256
46d28f5a37a3cae54a72b238f72e75c648f67d57db505adda259619442525bd6
-
SHA512
c1738016f9c00741d1f880cbb0fe450eebe5cae2caf86f35da707a42cc17643ac3ae33b13416dc69fe0468788455938d5a4fc4eae1eb87e59f114063cc2930aa
-
SSDEEP
49152:a3mWCgCYjyVcX7PNNBpjBlqAwRmhEFiPF2hzDNXzO/0uetGR:a3mWayTX7lpqAsFiMhnNDA
Score
7/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
Files
-
a9fca341ce8fcb9da33c098f954f17c8
-
vpnclient/28ip.html
-
vpnclient/gonggao.htm
-
vpnclient/images/Thumbs.db
-
vpnclient/images/gonggao.gif
-
vpnclient/images/khd.css
-
vpnclient/images/wenzi_1.jpg
-
vpnclient/images/wenzi_2.jpg
-
vpnclient/images/wenzi_bt.jpg
-
vpnclient/images/wenzi_left.jpg
-
vpnclient/images/zhuce.gif
-
vpnclient/ip.html
-
vpnclient/ssm.html
-
vpnclient/top.htm
-
vpnclient/toppic.jpg
-
vpnclient2/28vpn.exe
Headers
Sections
-
out.upx
Headers
Sections
-
vpnclient2/28vpn_en_5.0.exe
Headers
Sections
-
out.upx
Headers
Sections
-
vpnclient2/28vpn_zh_5.0.exe
Headers
Sections
-
out.upx
Headers
Sections
-
vpnclient2/gonggao.htm
-
vpnclient2/images/1.gif
-
vpnclient2/images/2.gif
-
vpnclient2/images/3.gif
-
vpnclient2/images/Thumbs.db
-
vpnclient2/images/gonggao.gif
-
vpnclient2/images/khd.css
-
vpnclient2/images/wenzi_1.jpg
-
vpnclient2/images/wenzi_2.jpg
-
vpnclient2/images/wenzi_bt.jpg
-
vpnclient2/images/wenzi_left.jpg
-
vpnclient2/images/zhuce.gif
-
vpnclient2/top.htm
-
vpnclient2/top.rar
-
top.htm
-
vpnclient2/toppic88888.jpg
-
vpnclient2/vpnclient2.lnk
-
vpnclient2/vpnlist.txt
-
vpnclient2/vpnlisten.txt
-
vpnclient2/youyou.ico
-
vpnclient2/复件 (2) top.htm
-
vpnclient2/复件 top.htm