General

  • Target

    e0f136d4ca9230b5dd75f752d4e7469b

  • Size

    10.6MB

  • MD5

    e0f136d4ca9230b5dd75f752d4e7469b

  • SHA1

    cfe96df24c0749010a8e6202b8943ca00f84361b

  • SHA256

    d11d269e70de07da5027481bcff05d72743cbf79b6ebe9b8bbd61304f3061f48

  • SHA512

    719c6e7e178c3bd6060399e9b6dde11134e4d14751f1ca4ce791b7dceeac4054236c3bb51238962c89aaab4fb3355a3c90969963c3031f76e0033537f18dbc16

  • SSDEEP

    196608:ZbeaS42Ex5aOQL3BHSTYoCkR0KKhhnoS3d+0azPUI9KCA/4zxnsnWj:pJ23/L3ByTYYKhb3dXKgb+xKq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 31 IoCs

    Checks for missing Authenticode signature.

Files

  • e0f136d4ca9230b5dd75f752d4e7469b
    .rar
  • zlsystem/SETUP.LST
  • zlsystem/setup.exe
    .exe windows:4 windows x86 arch:x86

    4159a9ccafdc9e418bec02d791aa5942


    Headers

    Imports

    Sections

  • zlsystem/下载说明.htm
    .html .js polyglot
  • zlsystem/先看看怎样安装.htm
    .html
  • zlsystem/出纳现金流量管理系统.CAB
    .cab
  • ASYCFILT.DLL
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • CMDLGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • COMCAT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    5316dd1ba7417f578451f902c4b4f845


    Headers

    Imports

    Exports

    Sections

  • COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DBRPRCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • EXCEL9.OLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • FLXGDCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • KPlay.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    afc7883bc93c9a3cedd749c3668f32d0


    Headers

    Imports

    Exports

    Sections

  • MDAC_TYP.EXE
    .exe windows:5 windows x86 arch:x86

    d287b46f6436ae965f0f1af9da8d89c9


    Code Sign

    Headers

    Imports

    Sections

  • MFC40.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    ef3d32741141a9ffde06721c65ea07b6


    Headers

    Imports

    Exports

    Sections

  • MSCC2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCH2CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCHRT20.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    a0a3b80e18d8fb6ca27a1f8612e03304


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCMCCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSCOMCT2.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    71e4dc10f7cc0c7bb2b43714bb9f46c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSDBRPTR.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9f29fe15fdea3890794aced11ef01c1a


    Headers

    Imports

    Exports

    Sections

  • MSDERUN.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    fa2d611a5b90872aab1e8906529a7ca8


    Headers

    Imports

    Exports

    Sections

  • MSFLXGRD.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    11eea53ea81b7d299e5a61db777d2725


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSHFGCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSHFLXGD.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    56ac46dcc88f67428b0149d3d554a99b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MSSTDFMT.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    813db3b6c9a1b45c2a363924917c26d9


    Headers

    Imports

    Exports

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    f583a53985668060aed820e29de94793


    Headers

    Imports

    Exports

    Sections

  • MSVCRT40.DLL
    .dll windows:4 windows x86 arch:x86

    57259dcda30c27e977785c33a8441434


    Headers

    Imports

    Exports

    Sections

  • OLEAUT32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • OLEPRO32.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • SCRRNCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • SCRRUN.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    9f19942a323759fd8c4c7deff3cd3ae8


    Headers

    Imports

    Exports

    Sections

  • SETUP1.EXE
    .exe windows:4 windows x86 arch:x86

    5946fd983925428aae7317d5d4322237


    Headers

    Imports

    Sections

  • ST6UNST.EXE
    .exe windows:4 windows x86 arch:x86

    2c2a74fe0776f6aac245ba9e8eeec7c6


    Headers

    Imports

    Sections

  • STDFTCHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • STDOLE2.TLB
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • THREED32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    d5f09a42b36ef8ed87b0317650ba47a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VB6CHS.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • VB6STKIT.DLL
    .dll windows:4 windows x86 arch:x86

    9f4b76d42cbc350286ec870347345155


    Headers

    Imports

    Exports

    Sections

  • Win32dll.dll
    .dll windows:4 windows x86 arch:x86

    638ea2ea069ab1e2c938413f3d2085fd


    Headers

    Imports

    Exports

    Sections

  • �����ֽ���������ϵͳ.exe
    .exe windows:4 windows x86 arch:x86

    92a2212065215224f09d12bf38e91b84


    Headers

    Imports

    Sections

  • �����ֽ�����ϵͳ����.htm
    .html
  • zlsystem/出纳现金流量系统帮助.htm
    .html
  • 下载说明.htm
    .html .js polyglot