General

  • Target

    ca406afe9bc33e30ff3c5e3479cb7eef

  • Size

    553KB

  • MD5

    ca406afe9bc33e30ff3c5e3479cb7eef

  • SHA1

    b7d3f0a71cf413c094e76831ae777b456795664d

  • SHA256

    c50f48e22001cff7352738b9fe34a384aa204902a9b618187a75613443a0194e

  • SHA512

    7845edfd5efef4e8b9109784dd4e508ef25fb6e0cdb873e233aa1dd82a477bdddd6730999ab041e708ad5df9f805f7c4f5b3bf5ffdd517bd58a43a1fcd4c1e1e

  • SSDEEP

    12288:+s19h4wPQWVaSzAtqq/9bx3/s7heoaVBRXLhg14ox:th4wPQWVaP9bxQINhK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ca406afe9bc33e30ff3c5e3479cb7eef
    .rar
  • test/List.asp
    .vbs
  • test/LyfUpload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5b498544543d112033c55ad8f1e51186


    Headers

    Imports

    Exports

    Sections

  • test/WordOcxFinalProj1.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • test/index.asp
  • test/main.asp
    .html
  • test/new.mdb
  • test/ocxdemo.asp
    .asp .vbs polyglot
  • test/othertest.asp
    .vbs
  • test/readme.txt
  • test/test.asp
  • test/test.htm
    .html
  • test/下载说明.htm
    .html .js polyglot
  • test/章.Ety
  • test/签章制作.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot