Overview

overview

3

Static

static

3

PYF/EGCal.exe

windows7-x64

1

PYF/EGCal.exe

windows10-2004-x64

1

PYF/GdiPlus.dll

windows7-x64

3

PYF/GdiPlus.dll

windows10-2004-x64

3

PYF/机械....1.exe

windows7-x64

1

PYF/机械....1.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d38ac5cfcc22a914f674f18189a623ee

  • Size

    3.3MB

  • MD5

    d38ac5cfcc22a914f674f18189a623ee

  • SHA1

    ee7f0daaf9321d5b7076888f09a042968dbc19a2

  • SHA256

    05f48b4465dc5240d1170ebe3148489b4ba90cdbf3ae3d2fd0c66bb4c0bb4f22

  • SHA512

    32aa517736b8fafe369269e1e7b25f336b0e9d8671800c0685cc0e06ee806f01bc7386e8576ea131728e6dc8a82da49b1a6a350438faaffb484ec47e5d18fa8c

  • SSDEEP

    98304:CVOcwBH/3z5qZA9dafIC/1ZBFLIbCgrkWh6oS9HYxplWRDKahQU9+dc:CQc23kqXafIy1vFMX3QD6lW5Kab9p

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d38ac5cfcc22a914f674f18189a623ee
    .rar
  • PYF/DB.mdb
  • PYF/EGCal.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PYF/GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    7941976a82dd7ff8b1a2ea069878fab3


    Headers

    Imports

    Exports

    Sections

  • PYF/SanPan.ini
  • PYF/Temp/SanPan.ini
  • PYF/readme.txt
  • PYF/下载说明.htm
    .html .js polyglot
  • PYF/位置图片.bmp
  • PYF/分辨率字体大小设置示意图片.bmp
  • PYF/机械设计系统3.1.exe
    .exe windows:4 windows x86 arch:x86

    da272e9bb4777d45e6ec575a6685dfdd


    Headers

    Imports

    Sections

  • 下载说明.htm
    .html .js polyglot