General

  • Target

    d799ee6bc41320aa46c00c5185e941d4

  • Size

    5.9MB

  • MD5

    d799ee6bc41320aa46c00c5185e941d4

  • SHA1

    3446e5c1add748637a6aa22484ce3f74a957bef5

  • SHA256

    8102846aa570d9ad12b681a734f3bdb946fad49915114a5c619205a77fbfc57d

  • SHA512

    f0103c0c8fb25dd73b2790c2b626dc6ed1b1e987afb2c7193ec8603c5af0dd0ef09b09fb3b12cc1477620629ef718b37c0a6781358b3f0219de09e3d3d454ad0

  • SSDEEP

    98304:d+dQdH+J/eb4Nnggq6MoJeFb4g6WTkQQLuCRPuLLxnc6xhMB9O8cPBRSU0K/UxxG:d851eboggq6Te14K6uCkq63UH4BRSU0w

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • d799ee6bc41320aa46c00c5185e941d4
    .rar
  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • 2DEngine.dll
    .dll windows:4 windows x86 arch:x86

    ef85d5a78b0f7380fe5fee0c6e3aa097


    Headers

    Imports

    Exports

    Sections

  • 2DLib.dll
    .dll windows:4 windows x86 arch:x86

    2de20d02e884287569db1d805ae9de9e


    Headers

    Imports

    Exports

    Sections

  • Avatar/10_12
    .gif
  • Avatar/11_10
    .gif
  • Avatar/12_8
    .gif
  • Avatar/13_7
    .gif
  • Avatar/14_6
    .gif
  • Avatar/1_17
    .gif
  • Avatar/2_13
    .gif
  • Avatar/3_12
    .gif
  • Avatar/4_10
    .gif
  • Avatar/5_8
    .gif
  • Avatar/6_7
    .gif
  • Avatar/7_6
    .gif
  • Avatar/8_17
    .gif
  • Avatar/9_13
    .gif
  • Avatar/Default_0.avt
  • Avatar/Default_0.avtg
  • Avatar/Default_1.avt
  • Avatar/Default_1.avtg
  • BD_NetWinModule.dll
    .dll windows:4 windows x86 arch:x86

    8141aaf404142f17326a2318608a73ae


    Headers

    Imports

    Exports

    Sections

  • CJ609Lib.dll
    .dll windows:4 windows x86 arch:x86

    bb1913734b6857a151868f812d84785c


    Headers

    Imports

    Exports

    Sections

  • Config.ini
  • CrashRpt.dll
    .dll windows:4 windows x86 arch:x86

    286af0f4fea4899e0c47062760152cea


    Headers

    Imports

    Exports

    Sections

  • Data/AD.gif
    .gif
  • Data/Blue/GameDL.smf
  • Data/Blue/HonorProgress.bmp
  • Data/Blue/Lobby.smf
  • Data/Blue/Show_0.bmp
  • Data/Blue/Show_1.bmp
  • Data/Blue/Thumbs.db
  • Data/Blue/TipQuestion.bmp
  • Data/Blue/Wait.bmp
  • Data/Chair_0.bmp
  • Data/Chair_1.bmp
  • Data/Chair_2.bmp
  • Data/GM.gif
    .gif
  • Data/Gold.bmp
  • Data/Green/GameDL.smf
  • Data/Green/HonorProgress.bmp
  • Data/Green/Lobby.smf
  • Data/Green/Online.bmp
  • Data/Green/Show_0.bmp
  • Data/Green/Show_1.bmp
  • Data/Green/Thumbs.db
  • Data/Green/TipQuestion.bmp
  • Data/Green/Wait.bmp
  • Data/Honor.bmp
  • Data/Icon/BlackList.bmp
  • Data/Icon/Channel.bmp
  • Data/Icon/Chat.ico
  • Data/Icon/Friend.bmp
  • Data/Icon/IE.bmp
  • Data/Icon/Main.bmp
  • Data/Icon/No.bmp
  • Data/Icon/Room.bmp
  • Data/Icon/Service.bmp
  • Data/Icon/Thumbs.db
  • Data/Lock.bmp
  • Data/SPK.gif
    .gif
  • Data/SYS.gif
    .gif
  • Data/Skin.xml
    .xml
  • Data/SoftKey.bmp
  • Data/SoftKey2.bmp
  • Data/SoftKey3.bmp
  • Data/Status.bmp
  • Data/System.gif
    .gif
  • Data/Table_2_0.bmp
  • Data/Table_3_0.bmp
  • Data/Table_4_0.bmp
  • Data/Table_5_0.bmp
  • Data/Table_6_0.bmp
  • Data/Thumbs.db
  • Data/VIPLevel.bmp
  • Data/ready.bmp
  • Face/0.gif
    .gif
  • Face/1.gif
    .gif
  • Face/10.gif
    .gif
  • Face/11.gif
    .gif
  • Face/12.gif
    .gif
  • Face/13.gif
    .gif
  • Face/14.gif
    .gif
  • Face/15.gif
    .gif
  • Face/16.gif
    .gif
  • Face/17.gif
    .gif
  • Face/18.gif
    .gif
  • Face/19.gif
    .gif
  • Face/2.gif
    .gif
  • Face/20.gif
    .gif
  • Face/21.gif
    .gif
  • Face/22.gif
    .gif
  • Face/23.gif
    .gif
  • Face/24.gif
    .gif
  • Face/25.gif
    .gif
  • Face/26.gif
    .gif
  • Face/27.gif
    .gif
  • Face/28.gif
    .gif
  • Face/29.gif
    .gif
  • Face/3.gif
    .gif
  • Face/30.gif
    .gif
  • Face/31.gif
    .gif
  • Face/32.gif
    .gif
  • Face/33.gif
    .gif
  • Face/34.gif
    .gif
  • Face/35.gif
    .gif
  • Face/36.gif
    .gif
  • Face/37.gif
    .gif
  • Face/38.gif
    .gif
  • Face/39.gif
    .gif
  • Face/4.gif
    .gif
  • Face/40.gif
    .gif
  • Face/41.gif
    .gif
  • Face/42.gif
    .gif
  • Face/43.gif
    .gif
  • Face/44.gif
    .gif
  • Face/45.gif
    .gif
  • Face/46.gif
    .gif
  • Face/47.gif
    .gif
  • Face/48.gif
    .gif
  • Face/49.gif
    .gif
  • Face/5.gif
    .gif
  • Face/50.gif
    .gif
  • Face/51.gif
    .gif
  • Face/52.gif
    .gif
  • Face/53.gif
    .gif
  • Face/54.gif
    .gif
  • Face/55.gif
    .gif
  • Face/56.gif
    .gif
  • Face/57.gif
    .gif
  • Face/58.gif
    .gif
  • Face/59.gif
    .gif
  • Face/6.gif
    .gif
  • Face/60.gif
    .gif
  • Face/61.gif
    .gif
  • Face/62.gif
    .gif
  • Face/63.gif
    .gif
  • Face/64.gif
    .gif
  • Face/65.gif
    .gif
  • Face/66.gif
    .gif
  • Face/7.gif
    .gif
  • Face/8.gif
    .gif
  • Face/9.gif
    .gif
  • Face/Face.bmp
  • Game.dll
    .dll windows:4 windows x86 arch:x86

    223b7460ee29276988605d3946419e27


    Headers

    Imports

    Exports

    Sections

  • GameDL.exe
    .exe windows:4 windows x86 arch:x86

    317454301c251dc22e2c70bfce945945


    Headers

    Imports

    Sections

  • GdiPlus.dll
    .dll windows:5 windows x86 arch:x86

    7d265bc0350ed04fb2dffec878eb283e


    Headers

    Imports

    Exports

    Sections

  • Head/Head.bmp
  • Head/img0.bmp
  • Head/img1.bmp
  • Head/img10.bmp
  • Head/img11.bmp
  • Head/img12.bmp
  • Head/img13.bmp
  • Head/img14.bmp
  • Head/img15.bmp
  • Head/img16.bmp
  • Head/img17.bmp
  • Head/img18.bmp
  • Head/img19.bmp
  • Head/img2.bmp
  • Head/img20.bmp
  • Head/img21.bmp
  • Head/img22.bmp
  • Head/img23.bmp
  • Head/img24.bmp
  • Head/img25.bmp
  • Head/img26.bmp
  • Head/img27.bmp
  • Head/img28.bmp
  • Head/img29.bmp
  • Head/img3.bmp
  • Head/img30.bmp
  • Head/img31.bmp
  • Head/img32.bmp
  • Head/img33.bmp
  • Head/img34.bmp
  • Head/img35.bmp
  • Head/img36.bmp
  • Head/img37.bmp
  • Head/img38.bmp
  • Head/img39.bmp
  • Head/img4.bmp
  • Head/img40.bmp
  • Head/img41.bmp
  • Head/img42.bmp
  • Head/img43.bmp
  • Head/img44.bmp
  • Head/img45.bmp
  • Head/img46.bmp
  • Head/img47.bmp
  • Head/img48.bmp
  • Head/img49.bmp
  • Head/img5.bmp
  • Head/img50.bmp
  • Head/img51.bmp
  • Head/img52.bmp
  • Head/img53.bmp
  • Head/img54.bmp
  • Head/img55.bmp
  • Head/img56.bmp
  • Head/img57.bmp
  • Head/img58.bmp
  • Head/img59.bmp
  • Head/img6.bmp
  • Head/img60.bmp
  • Head/img61.bmp
  • Head/img62.bmp
  • Head/img63.bmp
  • Head/img64.bmp
  • Head/img65.bmp
  • Head/img66.bmp
  • Head/img67.bmp
  • Head/img68.bmp
  • Head/img69.bmp
  • Head/img7.bmp
  • Head/img70.bmp
  • Head/img71.bmp
  • Head/img72.bmp
  • Head/img73.bmp
  • Head/img74.bmp
  • Head/img75.bmp
  • Head/img76.bmp
  • Head/img77.bmp
  • Head/img78.bmp
  • Head/img79.bmp
  • Head/img8.bmp
  • Head/img80.bmp
  • Head/img81.bmp
  • Head/img82.bmp
  • Head/img83.bmp
  • Head/img84.bmp
  • Head/img85.bmp
  • Head/img86.bmp
  • Head/img87.bmp
  • Head/img88.bmp
  • Head/img89.bmp
  • Head/img9.bmp
  • Head/img90.bmp
  • Head/img91.bmp
  • Head/img92.bmp
  • ImageOle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    efc5e3d5437fa23bd17ce08879b711e7


    Headers

    Imports

    Exports

    Sections

  • Lobby.exe
    .exe windows:4 windows x86 arch:x86

    dc072b97ab69d9cf474e33b457c157dd


    Headers

    Imports

    Sections

  • Rank.ini
  • SMTPHelper.dll
    .dll windows:4 windows x86 arch:x86

    2b61fedbd59711b5a8a1885f3a8c0f83


    Headers

    Imports

    Exports

    Sections

  • SkinMagic.dll
    .dll windows:4 windows x86 arch:x86

    73311293c21223a65c49aac91966fa84


    Headers

    Imports

    Exports

    Sections

  • Sound/btnfocus.wav
  • Sound/close.wav
  • Sound/folder.wav
  • Sound/friendonline.wav
  • Sound/msg.wav
  • Sound/outonline.wav
  • Sound/welcome.wav
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    381e79edf6f32b225643e232be0965fa


    Headers

    Imports

    Sections

  • VoIPClient.dll
    .dll windows:4 windows x86 arch:x86

    552201a32e04029bb83e70176a332ce3


    Headers

    Imports

    Exports

    Sections

  • VoIPView.dll
    .dll windows:4 windows x86 arch:x86

    eee2e4c20d3f22f9fea784a61a1056df


    Headers

    Imports

    Exports

    Sections

  • bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • dbghelp.dll
    .dll windows:5 windows x86 arch:x86

    bfdf63b29852e4529780d92b76de1d65


    Headers

    Imports

    Exports

    Sections

  • gameres.dll
    .dll windows:4 windows x86 arch:x86

    91926eac10c8f5f5fd1e56fd09c93dee


    Headers

    Imports

    Exports

    Sections

  • ijl15.dll
    .dll windows:4 windows x86 arch:x86

    6b540d7d784d97e028bc85e2ab457662


    Headers

    Imports

    Exports

    Sections

  • mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • version.xml
    .xml
  • zlib.dll
    .dll windows:4 windows x86 arch:x86

    d864ee5b5be09704bef5ffbefb087055


    Headers

    Imports

    Exports

    Sections

  • 新云软件.url
    .url