General
-
Target
b52ee4d3558942d62cefd3c39e5a6680
-
Size
1.9MB
-
MD5
b52ee4d3558942d62cefd3c39e5a6680
-
SHA1
008d104dbb7562a4954cc31c3d779cb21fbe5914
-
SHA256
6273d0d3bcdd9f880c3da07b970fe34bf6f002f3fb8712e8162b980899bd69f8
-
SHA512
9ec8627f71c71f6a19393de9768498603a5ce948b6c83cfda664fd795fdfec90566e0978cc023633a016c529f9e82a5d3269e36df493be0870c14f33b01b4112
-
SSDEEP
49152:FE/oV6Umm3K1/e4r/jd8Co51hI1Zp75G+:FE/c53KH/jdGX+1zFG+
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
b52ee4d3558942d62cefd3c39e5a6680
-
HongYan.exe
Headers
Sections
-
HongYan.ini
-
HongYan/Data/hongyan.hd
-
HongYan/Img/01.gif
-
HongYan/Img/02.gif
-
HongYan/Img/03.gif
-
HongYan/Img/04.gif
-
HongYan/Img/05.gif
-
HongYan/Img/06.gif
-
HongYan/Img/201012141940475345.jpg
-
HongYan/Img/201012141940481931.jpg
-
HongYan/Img/201012141940483793.jpg
-
HongYan/Img/201012141940489974.jpg
-
HongYan/Img/201012141940491444.jpg
-
HongYan/Img/201012141940492285.jpg
-
HongYan/Img/201012141940497555.jpg
-
HongYan/Img/201012141940503387.jpg
-
HongYan/Img/201012141940503625.jpg
-
HongYan/Img/201012141940503978.jpg
-
HongYan/Img/201012141940506691.jpg
-
HongYan/Img/201012141940509559.jpg
-
使用说明.txt
-
新云软件.url
-
鸿言文章创作系统.exe
Headers
Sections
-
out.upx
Headers
Sections