General

  • Target

    cdd733db07a1d9151aa288b39a61acb4

  • Size

    1.2MB

  • MD5

    cdd733db07a1d9151aa288b39a61acb4

  • SHA1

    8f21be346d69f89181e69786a8f1fa7f1a83ce92

  • SHA256

    0d7ffd9cd16f01623bd93a215c21e12ad4a5925e17c9af5f8575fedd1619154e

  • SHA512

    a82f82004cbeb920b56bfc58fcb00514b8c4e8d5f30bcd975e6d1b96ee7b39ba83da8147869cd88bac66c1f0e601ebe7915e56efa8892d64d74048d7a81953f9

  • SSDEEP

    24576:BIQF81I78lQC+1dhKPjyJECHyxemub9QIoZU:R7+/eEwB93oZU

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • cdd733db07a1d9151aa288b39a61acb4
    .zip
  • ٿͼ/Usp10.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ٿͼ/lib/cn.js
    .js
  • ٿͼ/lib/gnbox.js
    .js
  • ٿͼ/lib/qqapp.js
    .js
  • ٿͼ/lib/use/msxml5.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    d866aacd968e23d69b89243ad5faf65c


    Headers

    Imports

    Exports

    Sections

  • ٿͼ/lib/use/msxml5r.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ٿͼ/lib/use/nulldb
  • ٿͼ/main.htm
    .html .js polyglot
  • ٿͼ/main.js
  • ٿͼ/toolmao_èħQQ.htm
    .html
  • ٿͼ/QQ.url
  • ٿͼ/èħQQ.exe
    .exe windows:4 windows x86 arch:x86

    774ea2658baca3355170ff3f1ee88a57


    Headers

    Imports

    Exports

    Sections

  • ٿͼ/ðʱ.url