General

  • Target

    c1b1e71f04377962684ddae7ec1299d6

  • Size

    10.4MB

  • MD5

    c1b1e71f04377962684ddae7ec1299d6

  • SHA1

    ef69edd2545ebad9753d595b86e6f6f91e8386eb

  • SHA256

    5fd759d1ec37ca87dac33fc9e3f185236bb2732a2d96c10808e71415a7bf5174

  • SHA512

    24dbb11c88369f7e6a142604c9aa046f9dfbd9d5b7c9509dd6d73bd27783d67bbcce9e449c14a7166649ea8e68a79cba117de5e91449a90d1fad275ad98148a2

  • SSDEEP

    196608:GU865s7qXJ29EXTRu76z4zH2cyYchN2xFa3KAWtzr4xelz6hp3WSH5Oin7LmRQBa:GN65cqxD54zH2HYWN4waAqHIO6hdWLic

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • c1b1e71f04377962684ddae7ec1299d6
    .rar
  • puke888_setup-v1.5b100728.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Default.txt
  • ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    15c3f47ce2cf6887f91a029cb36319d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Puke888.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Puke888Update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RICHED20.DLL
    .dll windows:5 windows x86 arch:x86

    f009387e30ff32647a004d19f58c4f11


    Headers

    Imports

    Exports

    Sections

  • Sound/act.wav
  • Sound/cam.wav
  • Sound/click.wav
  • Sound/dl.wav
  • Sound/newgame.wav
  • Sound/pot.wav
  • Sound/self.wav
  • Sound/show.wav
  • Sound/time.wav
  • Sound/tmover.wav
  • Themes/Default/Chips/d1.gif
    .gif
  • Themes/Default/Chips/d100.gif
    .gif
  • Themes/Default/Chips/d1000.gif
    .gif
  • Themes/Default/Chips/d100000.gif
    .gif
  • Themes/Default/Chips/d1000000.gif
    .gif
  • Themes/Default/Chips/d25.gif
    .gif
  • Themes/Default/Chips/d25000.gif
    .gif
  • Themes/Default/Chips/d5.gif
    .gif
  • Themes/Default/Chips/d500.gif
    .gif
  • Themes/Default/Chips/d5000.gif
    .gif
  • Themes/Default/Chips/d500000.gif
    .gif
  • Themes/Default/Chips/e01.gif
    .gif
  • Themes/Default/Chips/e025.gif
    .gif
  • Themes/Default/Chips/e05.gif
    .gif
  • Themes/Default/Chips/e1.gif
    .gif
  • Themes/Default/Chips/e5.gif
    .gif
  • Themes/Default/Dealer.gif
    .gif
  • Themes/Default/button/backtolobby1.bmp
  • Themes/Default/button/backtolobby2.bmp
  • Themes/Default/button/backtolobby3.bmp
  • Themes/Default/button/bb1.bmp
  • Themes/Default/button/bb2.bmp
  • Themes/Default/button/bb3.bmp
  • Themes/Default/button/button1_1.bmp
  • Themes/Default/button/button1_2.bmp
  • Themes/Default/button/button1_3.bmp
  • Themes/Default/button/button2_1.bmp
  • Themes/Default/button/button2_2.bmp
  • Themes/Default/button/button2_3.bmp
  • Themes/Default/button/button3_1.bmp
  • Themes/Default/button/button3_2.bmp
  • Themes/Default/button/button3_3.bmp
  • Themes/Default/button/button4_1.bmp
  • Themes/Default/button/button4_2.bmp
  • Themes/Default/button/button4_3.bmp
  • Themes/Default/button/button5_1.bmp
  • Themes/Default/button/button5_2.bmp
  • Themes/Default/button/button5_3.bmp
  • Themes/Default/button/button_b_1.bmp
  • Themes/Default/button/button_b_2.bmp
  • Themes/Default/button/button_b_3.bmp
  • Themes/Default/button/button_r_1.bmp
  • Themes/Default/button/button_r_2.bmp
  • Themes/Default/button/button_r_3.bmp
  • Themes/Default/button/button_send_1.bmp
  • Themes/Default/button/button_send_2.bmp
  • Themes/Default/button/button_sit1.png
    .png
  • Themes/Default/button/button_sit2.png
    .png
  • Themes/Default/button/buy.bmp
  • Themes/Default/button/cap1.png
    .png
  • Themes/Default/button/cap2.png
    .png
  • Themes/Default/button/close1.bmp
  • Themes/Default/button/close2.bmp
  • Themes/Default/button/duijiang.bmp
  • Themes/Default/button/exchange.bmp
  • Themes/Default/button/iden.bmp
  • Themes/Default/button/logout1.bmp
  • Themes/Default/button/logout2.bmp
  • Themes/Default/button/logout3.bmp
  • Themes/Default/button/messenger1.bmp
  • Themes/Default/button/messenger2.bmp
  • Themes/Default/button/messenger3.bmp
  • Themes/Default/button/min1.bmp
  • Themes/Default/button/min2.bmp
  • Themes/Default/button/opentable1.bmp
  • Themes/Default/button/opentable2.bmp
  • Themes/Default/button/opentable3.bmp
  • Themes/Default/button/psw.bmp
  • Themes/Default/button/refresh_01.bmp
  • Themes/Default/button/refresh_02.bmp
  • Themes/Default/button/reset.bmp
  • Themes/Default/button/signupt1.bmp
  • Themes/Default/button/signupt2.bmp
  • Themes/Default/button/signupt3.bmp
  • Themes/Default/button/update.bmp
  • Themes/Default/button/upgrade.bmp
  • Themes/Default/button/usr.bmp
  • Themes/Default/button/vipp.bmp
  • Themes/Default/c1.bmp
  • Themes/Default/c2.bmp
  • Themes/Default/card/0.png
    .png
  • Themes/Default/card/0b.png
    .png
  • Themes/Default/card/1.png
    .png
  • Themes/Default/card/10.png
    .png
  • Themes/Default/card/10b.png
    .png
  • Themes/Default/card/11.png
    .png
  • Themes/Default/card/11b.png
    .png
  • Themes/Default/card/12.png
    .png
  • Themes/Default/card/12b.png
    .png
  • Themes/Default/card/13.png
    .png
  • Themes/Default/card/13b.png
    .png
  • Themes/Default/card/14.png
    .png
  • Themes/Default/card/14b.png
    .png
  • Themes/Default/card/15.png
    .png
  • Themes/Default/card/15b.png
    .png
  • Themes/Default/card/16.png
    .png
  • Themes/Default/card/16b.png
    .png
  • Themes/Default/card/17.png
    .png
  • Themes/Default/card/17b.png
    .png
  • Themes/Default/card/18.png
    .png
  • Themes/Default/card/18b.png
    .png
  • Themes/Default/card/19.png
    .png
  • Themes/Default/card/19b.png
    .png
  • Themes/Default/card/1b.png
    .png
  • Themes/Default/card/2.png
    .png
  • Themes/Default/card/20.png
    .png
  • Themes/Default/card/20b.png
    .png
  • Themes/Default/card/21.png
    .png
  • Themes/Default/card/21b.png
    .png
  • Themes/Default/card/22.png
    .png
  • Themes/Default/card/22b.png
    .png
  • Themes/Default/card/23.png
    .png
  • Themes/Default/card/23b.png
    .png
  • Themes/Default/card/24.png
    .png
  • Themes/Default/card/24b.png
    .png
  • Themes/Default/card/25.png
    .png
  • Themes/Default/card/25b.png
    .png
  • Themes/Default/card/26.png
    .png
  • Themes/Default/card/26b.png
    .png
  • Themes/Default/card/27.png
    .png
  • Themes/Default/card/27b.png
    .png
  • Themes/Default/card/28.png
    .png
  • Themes/Default/card/28b.png
    .png
  • Themes/Default/card/29.png
    .png
  • Themes/Default/card/29b.png
    .png
  • Themes/Default/card/2b.png
    .png
  • Themes/Default/card/3.png
    .png
  • Themes/Default/card/30.png
    .png
  • Themes/Default/card/30b.png
    .png
  • Themes/Default/card/31.png
    .png
  • Themes/Default/card/31b.png
    .png
  • Themes/Default/card/32.png
    .png
  • Themes/Default/card/32b.png
    .png
  • Themes/Default/card/33.png
    .png
  • Themes/Default/card/33b.png
    .png
  • Themes/Default/card/34.png
    .png
  • Themes/Default/card/34b.png
    .png
  • Themes/Default/card/35.png
    .png
  • Themes/Default/card/35b.png
    .png
  • Themes/Default/card/36.png
    .png
  • Themes/Default/card/36b.png
    .png
  • Themes/Default/card/37.png
    .png
  • Themes/Default/card/37b.png
    .png
  • Themes/Default/card/38.png
    .png
  • Themes/Default/card/38b.png
    .png
  • Themes/Default/card/39.png
    .png
  • Themes/Default/card/39b.png
    .png
  • Themes/Default/card/3b.png
    .png
  • Themes/Default/card/4.png
    .png
  • Themes/Default/card/40.png
    .png
  • Themes/Default/card/40b.png
    .png
  • Themes/Default/card/41.png
    .png
  • Themes/Default/card/41b.png
    .png
  • Themes/Default/card/42.png
    .png
  • Themes/Default/card/42b.png
    .png
  • Themes/Default/card/43.png
    .png
  • Themes/Default/card/43b.png
    .png
  • Themes/Default/card/44.png
    .png
  • Themes/Default/card/44b.png
    .png
  • Themes/Default/card/45.png
    .png
  • Themes/Default/card/45b.png
    .png
  • Themes/Default/card/46.png
    .png
  • Themes/Default/card/46b.png
    .png
  • Themes/Default/card/47.png
    .png
  • Themes/Default/card/47b.png
    .png
  • Themes/Default/card/48.png
    .png
  • Themes/Default/card/48b.png
    .png
  • Themes/Default/card/49.png
    .png
  • Themes/Default/card/49b.png
    .png
  • Themes/Default/card/4b.png
    .png
  • Themes/Default/card/5.png
    .png
  • Themes/Default/card/50.png
    .png
  • Themes/Default/card/50b.png
    .png
  • Themes/Default/card/51.png
    .png
  • Themes/Default/card/51b.png
    .png
  • Themes/Default/card/52.png
    .png
  • Themes/Default/card/52b.png
    .png
  • Themes/Default/card/5b.png
    .png
  • Themes/Default/card/6.png
    .png
  • Themes/Default/card/6b.png
    .png
  • Themes/Default/card/7.png
    .png
  • Themes/Default/card/7b.png
    .png
  • Themes/Default/card/8.png
    .png
  • Themes/Default/card/8b.png
    .png
  • Themes/Default/card/9.png
    .png
  • Themes/Default/card/9b.png
    .png
  • Themes/Default/card_back.png
    .png
  • Themes/Default/card_back_b.png
    .png
  • Themes/Default/count.png
    .png
  • Themes/Default/desktop_b.png
    .png
  • Themes/Default/dx.png
    .png
  • Themes/Default/empty.gif
    .gif
  • Themes/Default/eptsit.png
    .png
  • Themes/Default/f.png
    .png
  • Themes/Default/fun.bmp
  • Themes/Default/h_bg.png
    .png
  • Themes/Default/ico/1.ico
  • Themes/Default/ico/10.ico
  • Themes/Default/ico/11.ico
  • Themes/Default/ico/12.ico
  • Themes/Default/ico/2.ico
  • Themes/Default/ico/3.ico
  • Themes/Default/ico/4.ico
  • Themes/Default/ico/5.ico
  • Themes/Default/ico/6.ico
  • Themes/Default/ico/7.ico
  • Themes/Default/ico/8.ico
  • Themes/Default/ico/8886.ico
  • Themes/Default/ico/8887.ico
  • Themes/Default/ico/8888.ico
  • Themes/Default/ico/9.ico
  • Themes/Default/ico/l.ico
  • Themes/Default/ico/nl.ico
  • Themes/Default/ico/p.ico
  • Themes/Default/ico/sng.ico
  • Themes/Default/ico/vip.ico
  • Themes/Default/lobby.bmp
  • Themes/Default/lobby_right.bmp
  • Themes/Default/login.bmp
  • Themes/Default/m.png
    .png
  • Themes/Default/pnconnect.bmp
  • Themes/Default/popo1.png
    .png
  • Themes/Default/popo2.png
    .png
  • Themes/Default/rs.kf
  • Themes/Default/s1.png
    .png
  • Themes/Default/s2.png
    .png
  • Themes/Default/sit1.png
    .png
  • Themes/Default/sit2.png
    .png
  • Themes/Default/sit3.png
    .png
  • Themes/Default/sit4.png
    .png
  • Themes/Default/snd1.png
    .png
  • Themes/Default/snd2.png
    .png
  • Themes/Default/splash.bmp
  • Themes/Default/table.bmp
  • Themes/Default/tag1.bmp
  • Themes/Default/tag2.bmp
  • Themes/Default/tb1.png
    .png
  • Themes/Default/theme.ini
  • Themes/Default/tree_bg.bmp
  • Themes/Default/tur.jpg
    .jpg
  • Themes/Default/unknow.bmp
  • Themes/Default/usr.bmp
  • Themes/Default/viphidden.png
    .png
  • Themes/Default/y_bg.bmp
  • addr.txt
  • chatface/÷10.gif
    .gif
  • chatface/÷2.gif
    .gif
  • chatface/÷3.gif
    .gif
  • chatface/÷4.gif
    .gif
  • chatface/÷5.gif
    .gif
  • chatface/÷6.gif
    .gif
  • chatface/÷7.gif
    .gif
  • chatface/÷8.gif
    .gif
  • chatface/÷9.gif
    .gif
  • chatface/÷A.gif
    .gif
  • chatface/÷J.gif
    .gif
  • chatface/÷K.gif
    .gif
  • chatface/÷Q.gif
    .gif
  • chatface/10.gif
    .gif
  • chatface/2.gif
    .gif
  • chatface/3.gif
    .gif
  • chatface/4.gif
    .gif
  • chatface/5.gif
    .gif
  • chatface/6.gif
    .gif
  • chatface/7.gif
    .gif
  • chatface/8.gif
    .gif
  • chatface/9.gif
    .gif
  • chatface/A.gif
    .gif
  • chatface/J.gif
    .gif
  • chatface/K.gif
    .gif
  • chatface/Q.gif
    .gif
  • chatface/10.gif
    .gif
  • chatface/2.gif
    .gif
  • chatface/3.gif
    .gif
  • chatface/4.gif
    .gif
  • chatface/5.gif
    .gif
  • chatface/6.gif
    .gif
  • chatface/7.gif
    .gif
  • chatface/8.gif
    .gif
  • chatface/9.gif
    .gif
  • chatface/A.gif
    .gif
  • chatface/J.gif
    .gif
  • chatface/K.gif
    .gif
  • chatface/Q.gif
    .gif
  • chatface/10.gif
    .gif
  • chatface/2.gif
    .gif
  • chatface/3.gif
    .gif
  • chatface/4.gif
    .gif
  • chatface/5.gif
    .gif
  • chatface/6.gif
    .gif
  • chatface/7.gif
    .gif
  • chatface/8.gif
    .gif
  • chatface/9.gif
    .gif
  • chatface/A.gif
    .gif
  • chatface/J.gif
    .gif
  • chatface/K.gif
    .gif
  • chatface/Q.gif
    .gif
  • config.ini
  • face/01.png
    .png
  • face/02.png
    .png
  • face/03.png
    .png
  • face/04.png
    .png
  • face/05.png
    .png
  • face/06.png
    .png
  • face/07.png
    .png
  • face/08.png
    .png
  • face/09.png
    .png
  • face/10.png
    .png
  • face/11.png
    .png
  • face/12.png
    .png
  • face/13.png
    .png
  • face/14.png
    .png
  • face/15.png
    .png
  • general.ini
  • maxim.txt
  • puke888.ico
  • rs.kf
  • sign.ini
  • tips.txt
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • urlcfg.ini
  • urs/tb001.bmp
  • urs/tb002.bmp
  • urs/tb003.bmp
  • urs/tb004.bmp
  • urs/tb005.bmp
  • urs/tb006.bmp
  • 新云软件.url
    .url