General

  • Target

    c051b214f194f2033d266808aa57252f

  • Size

    13.8MB

  • MD5

    c051b214f194f2033d266808aa57252f

  • SHA1

    b4582d62241b754025f92bf480162c522e48024b

  • SHA256

    9b6b065c51582937da1816e812faf250645ca1dee0a4076ac92b0952e4092a4a

  • SHA512

    2335e01f4d238f1b3afc74fe087c0a97d29984ef47df6f3751f541b9c56a675621b1a16546df6baa215e6ea0670e3f2cad6fa2b48dcd10b57b6fc50a064c5d3d

  • SSDEEP

    393216:hC4vPj2z/rqAQgamAbgM7EP4XbcrK18yAGIxhJQJrx:vpAmgMYP4XbQKK9Gr

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • c051b214f194f2033d266808aa57252f
    .rar
  • 下载说明.htm
    .html .js polyglot
  • 汪来加法城/Budapi.u32
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 汪来加法城/WinCtrls.u32
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 汪来加法城/XTRAS/AWMP3.X32
    .dll windows:4 windows x86 arch:x86

    5fd669ea643adccdc0dbe0f34b1f487e


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/BMPVIEW.X32
    .dll windows:4 windows x86 arch:x86

    2fdd25610daa7981c6253ae5474bf538


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/DMPACK1.X32
    .dll windows:4 windows x86 arch:x86

    80626e7c8f961407b2d794b2fbad65b5


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/JPEGIMP.X32
    .dll windows:4 windows x86 arch:x86

    3416d78532757e3047fe9b8c19675b74


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/MIX32.X32
    .dll windows:1 windows x86 arch:x86

    516d96cfdc44d9e18781bf957dcfee80


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/MIXVIEW.X32
    .dll windows:4 windows x86 arch:x86

    8053b170264ea63c73bea4ae025ac8a2


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/SWADCMPR.X32
    .dll windows:4 windows x86 arch:x86

    778d301d8ddd609a223726b8e3db30f0


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/VIEWSVC.X32
    .dll windows:4 windows x86 arch:x86

    314d2eacc5d3a48f48d46ce982a61ce0


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/XTRAS/WMFVIEW.X32
    .dll windows:4 windows x86 arch:x86

    feea7adb85e6d7e6ac76fe0ae17c4ab7


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/altools.u32
    .dll windows:4 windows x86 arch:x86

    759a803fc5765c19365fdd8f688cd6d1


    Headers

    Imports

    Exports

    Sections

  • 汪来加法城/system/1.jpg
    .jpg
  • 汪来加法城/system/10.jpg
    .jpg
  • 汪来加法城/system/11.jpg
    .jpg
  • 汪来加法城/system/12.jpg
    .jpg
  • 汪来加法城/system/13.jpg
    .jpg
  • 汪来加法城/system/14.jpg
    .jpg
  • 汪来加法城/system/15.jpg
    .jpg
  • 汪来加法城/system/2.jpg
    .jpg
  • 汪来加法城/system/3.jpg
    .jpg
  • 汪来加法城/system/4.JPG
    .jpg
  • 汪来加法城/system/5.jpg
    .jpg
  • 汪来加法城/system/6.jpg
    .jpg
  • 汪来加法城/system/7.jpg
    .jpg
  • 汪来加法城/system/8.jpg
    .jpg
  • 汪来加法城/system/9.jpg
    .jpg
  • 汪来加法城/system/Thumbs.db
  • 汪来加法城/system/jtmp.dll
  • 汪来加法城/tMscontrols.u32
    .dll windows:1 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 汪来加法城/下载说明.htm
    .html .js polyglot
  • 汪来加法城/你的车库.exe
    .exe windows:4 windows x86 arch:x86

    57bc51db4053803328e9623bbe8ea4c9


    Headers

    Imports

    Sections

  • 汪来加法城/汪来加法城.exe
    .exe windows:4 windows x86 arch:x86

    57bc51db4053803328e9623bbe8ea4c9


    Headers

    Imports

    Sections

  • 汪来加法城/简历.txt
  • 汪来加法城/说明.txt