Overview

overview

7

Static

static

7

QQ列车�....7.exe

windows7-x64

7

QQ列车�....7.exe

windows10-2004-x64

7

QQ列车�....7.exe

windows7-x64

7

QQ列车�....7.exe

windows10-2004-x64

7

官方网站.url

windows7-x64

1

官方网站.url

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b409a0cde2a10ffab1ec07eb85aa4c63

  • Size

    1.6MB

  • MD5

    b409a0cde2a10ffab1ec07eb85aa4c63

  • SHA1

    0fddb53da368ca62f66e8fdd524b42074629a507

  • SHA256

    fdf13e63a1dd7e2bce2a330e73fd23c0dd4c255c3aecef96a42391ef8a8af413

  • SHA512

    6e8a63409c078bb5e2ac30ffee4fd4eb6058b8f7d4971b9e80abe7d253fdecf92e0b9d415ce78caf5f1983a7b238417077d39dc789931a7b4ced0818869cd5e8

  • SSDEEP

    49152:Jhl+WtDhloW6m3F7kpP7vvw5APjh9ohbp7IRJ:jdtFloxmCpz3w5Abh9ohiRJ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • b409a0cde2a10ffab1ec07eb85aa4c63
    .rar
  • QQ列车小镇管家辅助V3.7.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe .js windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections

  • QQ列车小镇管家辅助其它系统V3.7.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 使用说明.txt
  • 官方网站.url
  • 新云软件.url
    .url