ba731cf66b24f95ab10d0a77c329ea9a

resource	yara_rule
static1/unpack001/QQ餐厅助手/QQ餐厅助手.exe	aspack_v212_v242

resource
unpack001/QQ餐厅助手/QQ餐厅助手.exe

SHA256 5ec32287cf7b1a0830148c9c28cbb7c0af4e9e7005858df9abeb74f3b5e0746f
MD5 ba731cf66b24f95ab10d0a77c329ea9a
SHA1 d16f20908eb1aa52184c92a2c912ea299ca39a72
SHA512 12953a2c01dca4433a8c7ea5ed0b50e8bf8952fbf4f751018f961070f0672069e2e61bb9bf59dee200b72af46a2c16599628f3b304321656687136da6c8c1f37
SSDEEP 49152:HFqc/JxbDkCB4RICWfEvXPWAKvZ4Qdh/NmuV1/O9+AfMSJTLD+NfdBqoTB:lqc/JCCBeWsnWA0RdNbn09JTWB
MD5 SHA1 SHA512 SSDEEP

QQ餐厅助手/QQ餐厅助手.exe

SHA256 91be736909f144eebb2d060e4c7933e80bdb714d8fd09974cb434ad54088c27a
MD5 3193f7f8feb6fd65089df87e104658e3
SHA1 58ba25e15e6b5cf93317e1881a0391dc33d167a3
SHA512 ad02e1210fe8ac9b6dd9d20372b9a7e0d1a5d7890473cf1a9a2316230c9c36913246efd3539bc6ccf07a45923dc218b6e7da62acb35feefe10a7370fbabf0363
SSDEEP 24576:y5VHKdBdqOh5GoLtAlKMe8jwfCXbVCimkWRtmjmaIytBP0Kv:yTidqOzDawf0orkWRtmjm3ytBP0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3358721

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

626KB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

18KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

557KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.

Size

102KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

QQ餐厅助手/ReadMe.txt

SHA256 bfea602e991c1dd60789164d28cfd8d86842fff9bb66bd4826bab9e7a17c2402
MD5 32ce5221847a1901967ac00101517e1f
SHA1 c5a05a1574f9c70abba67351b3f6effd6ad2edbd
SHA512 7090d924a9373f8d9abd40c838b0e8953d234928fa0b66e6fbe81bf2920fc027f7ff64936e40de13aad60b2367c47802c84bfa925b67a94e18834ae51b6f6644
SSDEEP 192:FzlBt+uHEM/C/BbEyPxFVjZfrEnFw1pfFLuM0EOnB2RXprvOYm:JlBt+ukM/MqIxt4Fw1VBuyOB2tp+
MD5 SHA1 SHA512 SSDEEP

QQ餐厅助手/主界面介绍.jpg

SHA256 6f8467b78e9a8561ed5be861a39b372dbd7d487c748bfcd3016535eb63ee13da
MD5 19b0b135cd8a5c2a81d68da751f94a56
SHA1 d585be1942238ec6004558bf090e89ce27632e5c
SHA512 2a49ec270d30e99caaf3ec59c06883fd4644e342f46eef77c85f3cf283620bc647e6bd67383d0253dd981828e0285f8a4d070af28978d94c3278fd847e7a771b
SSDEEP 6144:ZIgIkLwucVk+UqjyLlPgeFwUlsqYS6lbtFdQWJ2SiJ43caHllbSibfvF0cn2Kk10:BMuhoG5sqYS6l9Q7P23cqll2evFtw/12
MD5 SHA1 SHA512 SSDEEP

QQ餐厅助手/官方论坛.url

SHA256 b8f95369a5a561965c4d778d853ca4a0f891f7130db732a4c16f85382300f9c3
MD5 f3a74c75d0053c88620e608f600ff6dc
SHA1 4e3e9095a14b3ea66e272c8dad7cd48b1fdb8be8
SHA512 46a8311cea4455ccd5d5b48d5fa7b6814ac5eb3cb728325c68b18fdb004e6478df308836fde8625bf3b7acfb19e8b02e6bc5c2ee4ce992e8fa6914dad02668c4
MD5 SHA1 SHA512

QQ餐厅助手/新云软件.url

SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
MD5 4f0017b3b346bd0626f0c3b915e6e734
SHA1 823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
SHA512 0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
MD5 SHA1 SHA512

QQ餐厅助手/设置介绍.jpg

SHA256 4d90fddbce921aa5bfe434d55a956d6e768c95ce39dba9e94748824deb894bf9
MD5 f1183aa61b69f72d139c8718c7fee232
SHA1 f35eceb22d4506bc420ed59d8313a2e3c978c5b8
SHA512 b2daa3a0e75de822e6f75168baed98bb06558f081f1b4051fb6ff6dec06a95677f0432b115daf51ab740019df36a308f691b91d01e8ab608a60df0c895dc6d0f
SSDEEP 6144:iegc2fCFFmNgKY37Dj48P+O4/WPEMoVZzn1oISO:EvfiFm+Vb4/Gjyr+In
MD5 SHA1 SHA512 SSDEEP

QQ餐厅助手/雇佣信息介绍.jpg

SHA256 e0dfa5660510530bb398e29835ab532c9cbebc81617221c0e09b08cdf1d3d743
MD5 996dd6279a9015d6dfea3073437d6a61
SHA1 ffd699200ac8b28376e9219f8a7f623abbdb2d7c
SHA512 4f2195e3a8f7d6089a47b9e17aca7586632ed68dc90fe027de237044f402fa5cbc9e1c41c410daf46506c0e79716ee34b9cdb6125c3f81c2dbd29d5dcd0cf013
SSDEEP 12288:FPLgSZycZfYdzjn8ktZ5y4ElEa437SoisKVdvZ1v:FspMgNjnztZ5y4Eqaw7DivR
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer