General

  • Target

    9aeb49523234405f29e6a5ed83cc99dca6631f005790684ad12a52feb6639eaf

  • Size

    14.3MB

  • MD5

    6035667ebb5c444ab91627037d968d1e

  • SHA1

    d371becf3b58dc96a05e4f8a07bf981614b84222

  • SHA256

    9aeb49523234405f29e6a5ed83cc99dca6631f005790684ad12a52feb6639eaf

  • SHA512

    13c9cd10f523bc700ae7cc3ca9f5ee180d84834bdacc1bd9b21563b109286387e2d55fd7a9361f077768afebcc670eb98f94dff382e7313e27cbe86bc2169c6c

  • SSDEEP

    393216:8UVgb0bySAgouUOhde46fHJ7TklbaId1USynPcPmCPZhNMe3:84gAbVApuUbZfpXk1zCnUPBPZjMe3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 48 IoCs

    Checks for missing Authenticode signature.

Files

  • 9aeb49523234405f29e6a5ed83cc99dca6631f005790684ad12a52feb6639eaf
    .zip
  • bin/Antlr3.Runtime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Antlr3.Runtime.pdb
  • bin/Common.Logging.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Common.Logging.Core.pdb
  • bin/Common.Logging.Core.xml
    .xml
  • bin/Common.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Common.Logging.pdb
  • bin/Common.Logging.xml
    .xml
  • bin/EntityFramework.SqlServer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/EntityFramework.SqlServer.xml
    .xml
  • bin/EntityFramework.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/EntityFramework.xml
    .xml
  • bin/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Microsoft.AI.Agent.Intercept.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AI.DependencyCollector.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AI.PerfCounterCollector.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AI.ServerTelemetryChannel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AI.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AI.WindowsServer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AnalysisServices.AdomdClient.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AspNet.SignalR.Client.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.AspNet.SignalR.Client.xml
    .xml
  • bin/Microsoft.Practices.ServiceLocation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/Microsoft.Practices.ServiceLocation.pdb
  • bin/Microsoft.Practices.ServiceLocation.xml
    .xml
  • bin/Microsoft.Practices.Unity.Configuration.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Microsoft.Practices.Unity.Configuration.xml
    .xml
  • bin/Microsoft.Practices.Unity.RegistrationByConvention.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Microsoft.Practices.Unity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Microsoft.Practices.Unity.xml
    .xml
  • bin/Microsoft.Web.Infrastructure.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/MySql.Data.Entity.EF6.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/MySql.Data.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/NPOI.OOXML.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/NPOI.OOXML.xml
    .xml
  • bin/NPOI.OpenXml4Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/NPOI.OpenXml4Net.xml
    .xml
  • bin/NPOI.OpenXmlFormats.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/NPOI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/NPOI.xml
    .xml
  • bin/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Newtonsoft.Json.xml
    .xml
  • bin/Quartz.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Quartz.pdb
  • bin/Quartz.xml
    .xml
  • bin/SSO.Client.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/SSO.Framework.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Busines.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Busines.pdb
  • bin/Scrum.Application.Cache.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Cache.pdb
  • bin/Scrum.Application.Code.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Code.pdb
  • bin/Scrum.Application.Entity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Entity.pdb
  • bin/Scrum.Application.Entity.xml
    .xml
  • bin/Scrum.Application.IService.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.IService.pdb
  • bin/Scrum.Application.Mapping.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Mapping.pdb
  • bin/Scrum.Application.Service.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Service.pdb
  • bin/Scrum.Application.Service.xml
    .xml
  • bin/Scrum.Application.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Application.Web.dll.config
  • bin/Scrum.Application.Web.pdb
  • bin/Scrum.Cache.Factory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Cache.Factory.pdb
  • bin/Scrum.Cache.Redis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Cache.Redis.pdb
  • bin/Scrum.Cache.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Cache.pdb
  • bin/Scrum.CodeGenerator.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.CodeGenerator.pdb
  • bin/Scrum.Data.EF.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Data.EF.pdb
  • bin/Scrum.Data.Repository.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Data.Repository.pdb
  • bin/Scrum.Data.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Data.pdb
  • bin/Scrum.Quartz.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Quartz.dll.config
  • bin/Scrum.Quartz.pdb
  • bin/Scrum.Util.Extension.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.Extension.pdb
  • bin/Scrum.Util.FlowWork.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.FlowWork.pdb
  • bin/Scrum.Util.Ioc.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.Ioc.pdb
  • bin/Scrum.Util.Log.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.Log.pdb
  • bin/Scrum.Util.Offices.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.Offices.pdb
  • bin/Scrum.Util.SignalR.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.SignalR.pdb
  • bin/Scrum.Util.WeChat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.WeChat.pdb
  • bin/Scrum.Util.WebControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.WebControl.pdb
  • bin/Scrum.Util.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Scrum.Util.pdb
  • bin/ServiceStack.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/ServiceStack.Common.xml
    .xml
  • bin/ServiceStack.Interfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/ServiceStack.Redis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/ServiceStack.Redis.xml
    .xml
  • bin/ServiceStack.Text.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/ServiceStack.Text.xml
    .xml
  • bin/System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/System.Data.SQLite.xml
    .xml .js polyglot
  • bin/System.Diagnostics.Tracing.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Net.Http.Formatting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Net.Http.Formatting.xml
  • bin/System.Runtime.InteropServices.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Runtime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Helpers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Helpers.xml
  • bin/System.Web.Http.WebHost.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Http.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Mvc.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Mvc.xml
  • bin/System.Web.Optimization.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Optimization.xml
  • bin/System.Web.Razor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.Razor.xml
  • bin/System.Web.WebPages.Deployment.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.WebPages.Deployment.xml
  • bin/System.Web.WebPages.Razor.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.WebPages.Razor.xml
  • bin/System.Web.WebPages.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/System.Web.WebPages.xml
  • bin/WebGrease.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/log4net.xml
    .xml .vbs polyglot
  • bin/roslyn/Microsoft.Build.Tasks.CodeAnalysis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/Microsoft.CSharp.Core.targets
  • bin/roslyn/Microsoft.CodeAnalysis.CSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/Microsoft.CodeAnalysis.VisualBasic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/Microsoft.CodeAnalysis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/Microsoft.VisualBasic.Core.targets
  • bin/roslyn/System.Collections.Immutable.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/System.Reflection.Metadata.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/VBCSCompiler.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/VBCSCompiler.exe.config
  • bin/roslyn/csc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • bin/roslyn/vbc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/EntityFramework.SqlServer.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/EntityFramework.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Net.Http.Formatting.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Web.Helpers.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Web.Optimization.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Web.Razor.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Web.WebPages.Deployment.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Web.WebPages.Razor.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • bin/zh-Hans/System.Web.WebPages.resources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections