General

  • Target

    abe91ca2d8c162bc993f57a70546ccc8

  • Size

    415KB

  • MD5

    abe91ca2d8c162bc993f57a70546ccc8

  • SHA1

    a73a39a6808ef56abb1ebf33108b4234c73af0ee

  • SHA256

    807d23e10c0e8220959b19e9b6e06bd272155fdcce3963c27512a88310793299

  • SHA512

    45cc83ae5f6102a072f87d187a994210e8ae96340013873deb840d4924e8b5f824731824e59bf449d2d16d2bb3690827fd5f4a4fedef4e2e8cb74e1375c3af91

  • SSDEEP

    12288:jrmJjBnE7QcEXoMx4Late41SkAt+6oSWKr:jWjaQMMAatgVnr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • abe91ca2d8c162bc993f57a70546ccc8
    .rar
  • MFC42D.DLL
    .dll windows:4 windows x86 arch:x86

    9f3980d49f12d0c47b136a2f3127c31f


    Headers

    Imports

    Sections

  • MSVCRTD.DLL
    .dll windows:4 windows x86 arch:x86

    265cd32afd4d72991a91eb9bf6c51bae


    Headers

    Imports

    Exports

    Sections

  • myhook.dll
    .dll windows:4 windows x86 arch:x86

    af5a8dcd2288e59d6fa90024eca97010


    Headers

    Imports

    Exports

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 模拟幽灵.exe
    .exe windows:4 windows x86 arch:x86

    adb31796972d50aa956c8fa436415405


    Headers

    Imports

    Sections

  • 科达论坛-论坛首页.url
    .url