General
-
Target
d1ed886239aac3d60eccbd3aa049e84e.bin
-
Size
1.9MB
-
MD5
d1ed886239aac3d60eccbd3aa049e84e
-
SHA1
0b8a143730473df7afbea6716208d862b7f6028d
-
SHA256
1aeaafab401ed0caae82f6627e33522703a8023829cffd63baf9c7c0ccf21e8d
-
SHA512
39b4799f166be62003d2d4a903c5148cb36c7097b8c9c0f8daf876d412ec834a873ef62c47f49ba9ba77fe3f097235aeddab9ef5ae1332cc77338a30583c72b1
-
SSDEEP
49152:EZgEDTYroJ0lBNIydOEmbHCGJfDy1IgUS9Emj8O69CgX:E6E3bUB1ri3Jm1IdaEmj8rCgX
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
d1ed886239aac3d60eccbd3aa049e84e.bin
-
NEWMAIL.WAV
-
QQWry.Dat
-
SERVER.INI
-
TEMPLATE/FORWARD/html普通转发.htm
-
TEMPLATE/FORWARD/html普通转发.htm.ini
-
TEMPLATE/FORWARD/普通转发.txt
-
TEMPLATE/FORWARD/普通转发.txt.ini
-
TEMPLATE/MACRO/_kooDATE.gif
-
TEMPLATE/MACRO/_kooFROMADDR.gif
-
TEMPLATE/MACRO/_kooFROMNAME.gif
-
TEMPLATE/MACRO/_kooOLDCC.gif
-
TEMPLATE/MACRO/_kooOLDRECVER.gif
-
TEMPLATE/MACRO/_kooQUOTEOLD.gif
-
TEMPLATE/MACRO/_kooRECVDATE.gif
-
TEMPLATE/MACRO/_kooRECVNAME.gif
-
TEMPLATE/MACRO/_kooRECVSUBJECT.gif
-
TEMPLATE/MACRO/_kooRECVTIME.gif
-
TEMPLATE/MACRO/_kooREPLYADDR.gif
-
TEMPLATE/MACRO/_kooREPLYNAME.gif
-
TEMPLATE/MACRO/_kooTIME.gif
-
TEMPLATE/MACRO/_kooTOADDR.gif
-
TEMPLATE/MACRO/_kooTODUTYNAME.GIF
-
TEMPLATE/MACRO/_kooTONAME.gif
-
TEMPLATE/MACRO/_kooTONICKNAME.GIF
-
TEMPLATE/MACRO/_kooTOSHOWNAME.GIF
-
TEMPLATE/NEW/Html模板.htm.ini
-
TEMPLATE/NEW/印象.htm
-
TEMPLATE/NEW/印象.htm.ini
-
TEMPLATE/NEW/坚持.htm
-
TEMPLATE/NEW/坚持.htm.ini
-
TEMPLATE/NEW/宽蓝纹.htm.ini
-
TEMPLATE/NEW/春雨.htm
-
TEMPLATE/NEW/春雨.htm.ini
-
TEMPLATE/NEW/普通信件.txt
-
TEMPLATE/NEW/灰细纹.htm
-
TEMPLATE/NEW/灰细纹.htm.ini
-
TEMPLATE/NEW/简单.txt
-
TEMPLATE/NEW/简单.txt.ini
-
TEMPLATE/NEW/航行.htm.ini
-
TEMPLATE/NEW/英文普通信件.txt
-
TEMPLATE/NEW/蓝细纹.htm
-
TEMPLATE/NEW/蓝细纹.htm.ini
-
TEMPLATE/REPLY/印象.htm
-
TEMPLATE/REPLY/印象.htm.ini
-
TEMPLATE/REPLY/坚持.htm
-
TEMPLATE/REPLY/坚持.htm.ini
-
TEMPLATE/REPLY/春雨.htm
-
TEMPLATE/REPLY/春雨.htm.ini
-
TEMPLATE/REPLY/普通回复.txt
-
TEMPLATE/REPLY/灰细纹.htm
-
TEMPLATE/REPLY/灰细纹.htm.ini
-
TEMPLATE/REPLY/简单.txt
-
TEMPLATE/REPLY/简单.txt.ini
-
TEMPLATE/REPLY/英文普通回复.txt
-
TEMPLATE/REPLY/蓝细纹.htm
-
TEMPLATE/REPLY/蓝细纹.htm.ini
-
TEMPLATE/koomail_images/PE15-2.gif
-
TEMPLATE/koomail_images/RE03-5.gif
-
TEMPLATE/koomail_images/Thumbs.db
-
TEMPLATE/koomail_images/back1.gif
-
TEMPLATE/koomail_images/back2.gif
-
TEMPLATE/koomail_images/back2_2.GIF
-
kmupdate.exe
Headers
Sections
-
out.upx
Headers
Sections
-
koomail.exe
Headers
Sections
-
koomail.exe.manifest
-
license.txt
-
安装说明.url