General

  • Target

    xx46.exe11111

  • Size

    11.2MB

  • MD5

    1f39067023ce9ec3526d12b12f773e42

  • SHA1

    26999bf9923a04eca1ed24ba7c64f3652942ed4e

  • SHA256

    27cdc7cba6d8b4a9482a89f494960c593b61a89ca47d1ba74c92e98a825bf6ae

  • SHA512

    ac6404add2d51d1670afc4dacf2ee293258e9e09518494b3acfda0d098bbd107f22e8473c9ea22edfe342bd5baa4d48d6210509f33cfb4bb5a60278ab9ed5bda

  • SSDEEP

    196608:jE8bd3pz0ysz3zW+WDVy9fb9TYrYKc7fmgF/AW9SislE1BT6LPb/56ddb:jE8Dz0zWHDVy9xKJGdMe1BTqb/eN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • xx46.exe11111
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • LibDui.dll
    .dll windows:5 windows x86 arch:x86

    f8be6c04a134a3735ad90ccfac5c0b2a


    Headers

    Imports

    Exports

    Sections

  • Res.dll
    .zip
  • Default.xml
    .xml
  • MainWnd.xml
    .xml
  • Main_Alone.xml
  • Main_Alone_Buy_daylist.xml
    .xml
  • Main_Alone_Buy_daylist_x.xml
    .xml
  • Main_Alone_Buy_dqlist.xml
    .xml
  • Main_Alone_Buy_prolist.xml
    .xml
  • Main_Alone_List.xml
    .xml
  • Main_Buy.xml
  • Main_Buy_BuyGroupList.xml
    .xml
  • Main_Buy_BuyList.xml
    .xml
  • Main_Buy_PayTypeList.xml
    .xml
  • Main_Desk.xml
  • Main_Fanli.xml
  • Main_Fltx.xml
  • Main_Fltx_List.xml
    .xml
  • Main_Fltxindex.xml
  • Main_Flyj.xml
  • Main_Flyj_List.xml
    .xml
  • Main_Flzc.xml
  • Main_Flzc_List.xml
    .xml
  • Main_GetPwd.xml
  • Main_GongGao.xml
  • Main_GongGao_List.xml
    .xml
  • Main_GongGao_Show.xml
    .xml
  • Main_Home.xml
  • Main_Jiasu.xml
  • Main_Jiasu_Diqu.xml
    .xml
  • Main_Jiasu_List.xml
    .xml
  • Main_Login.xml
  • Main_Model.xml
  • Main_Reg.xml
  • Main_Share.xml
  • Main_Share2.xml
  • Main_Tg.xml
  • Main_Tg_List.xml
    .xml
  • Main_Uc.xml
  • Main_Uc_OrderList.xml
    .xml
  • Main_Uc_Switch.xml
    .xml
  • Main_YaoQing.xml
  • Main_YaoQing_List.xml
    .xml
  • Main_YuYan.xml
  • MenuWnd.xml
    .xml
  • MessageWnd.xml
  • Res.xml
    .xml
  • SettingWnd.xml
  • WaitWnd.xml
    .xml
  • fast/Thumbs.db
  • fast/progressb.png
    .png
  • fast/progressf.png
    .png
  • fast/progressf_1.png
    .png
  • fast/progressf_2.png
    .png
  • home/Thumbs.db
  • home/gonggao.png
    .png
  • home/group1.png
    .png
  • home/group2.png
    .png
  • home/group3.png
    .png
  • home/group4.png
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/[email protected]
    .png
  • home/kaiji.png
    .png
  • home/message.png
    .png
  • home/right.png
    .png
  • jiasu/Thumbs.db
  • jiasu/add.png
    .png
  • jiasu/fastquan1.png
    .png
  • jiasu/fastquan2.png
    .png
  • jiasu/fastquan3.png
    .png
  • jiasu/fg.png
    .png
  • jiasu/guoqi_0.png
    .png
  • jiasu/guoqi_1.png
    .png
  • jiasu/guoqi_10.png
    .png
  • jiasu/guoqi_11.png
    .png
  • jiasu/guoqi_12.png
    .png
  • jiasu/guoqi_13.png
    .png
  • jiasu/guoqi_14.png
    .png
  • jiasu/guoqi_15.png
    .png
  • jiasu/guoqi_16.png
    .png
  • jiasu/guoqi_17.png
    .png
  • jiasu/guoqi_18.png
    .png
  • jiasu/guoqi_19.png
    .png
  • jiasu/guoqi_2.png
    .png
  • jiasu/guoqi_20.png
    .png
  • jiasu/guoqi_21.png
    .png
  • jiasu/guoqi_22.png
    .png
  • jiasu/guoqi_23.png
    .png
  • jiasu/guoqi_24.png
    .png
  • jiasu/guoqi_25.png
    .png
  • jiasu/guoqi_26.png
    .png
  • jiasu/guoqi_27.png
    .png
  • jiasu/guoqi_28.png
    .png
  • jiasu/guoqi_3.png
    .png
  • jiasu/guoqi_4.png
    .png
  • jiasu/guoqi_5.png
    .png
  • jiasu/guoqi_6.png
    .png
  • jiasu/guoqi_7.png
    .png
  • jiasu/guoqi_8.png
    .png
  • jiasu/guoqi_9.png
    .png
  • jiasu/[email protected]
    .png
  • jiasu/[email protected]
    .png
  • jiasu/tip.png
    .png
  • lan/1.xml
    .xml
  • lan/2.xml
    .xml
  • lan/3.xml
    .xml
  • login/Thumbs.db
  • login/fxui_1.png
    .png
  • login/logo.png
    .png
  • login/txtinput00.png
    .png
  • login/txtinputp00.png
    .png
  • login/white_bg.png
    .png
  • login/youke.png
    .png
  • main/Thumbs.db
  • main/buy_groupbg.png
    .png
  • main/buy_groupbg1.png
    .png
  • main/dqsel.png
    .png
  • main/fx_az.png
    .png
  • main/fx_ios.png
    .png
  • main/fx_pc.png
    .png
  • main/fx_web.png
    .png
  • main/my_vip.png
    .png
  • main/myuserbk.png
    .png
  • main/pay_1.png
    .png
  • main/pay_2.png
    .png
  • main/pay_3.png
    .png
  • main/pay_4.png
    .png
  • main/radio0.gif
    .gif
  • main/reward.png
    .png
  • main/sign_in.png
    .png
  • main/switch_account.png
    .png
  • main/switch_account_over.png
    .png
  • main/sys.png
    .png
  • main/tb_1.png
    .png
  • main/transformation.png
    .png
  • main/type_bg.png
    .png
  • main/v.png
    .png
  • main/v_n.png
    .png
  • main/wnd_title_bg.png
    .png
  • menu/Thumbs.db
  • menu/icon.png
    .png
  • menu/menu_bk.png
    .png
  • menu/menu_check.png
    .png
  • menu/menu_expand.png
    .png
  • res/Thumbs.db
  • res/back.png
    .png
  • res/btn1_1.png
    .png
  • res/btn1_2.png
    .png
  • res/btn1_2_g.png
    .png
  • res/btn1_3.png
    .png
  • res/btn2.png
    .png
  • res/btn3.png
    .png
  • res/close.png
    .png
  • res/close_btn.png
    .png
  • res/desk.png
    .png
  • res/form.jpg
    .jpg
  • res/fxui_1.png
    .png
  • res/gb_1.png
    .png
  • res/gb_2.png
    .png
  • res/gb_3.png
    .png
  • res/gb_4.png
    .png
  • res/input1.png
    .png
  • res/msgico0.png
    .png
  • res/msgico1.png
    .png
  • res/radio0.png
    .png
  • res/radio1.png
    .png
  • res/red_hot.png
    .png
  • res/rightMore.png
    .png
  • res/s_b.png
    .png
  • res/s_box.png
    .png
  • res/s_box_1.png
    .png
  • res/s_m.png
    .png
  • res/s_r.png
    .png
  • res/s_t.png
    .png
  • res/scroll.png
    .png
  • res/scroll1.png
    .png
  • res/sel.png
    .png
  • res/wait.gif
    .gif
  • res/wait_bg.png
    .png
  • setting/Thumbs.db
  • setting/cg_ico.png
    .png
  • setting/cg_ico_1.png
    .png
  • setting/dl_ico.png
    .png
  • setting/dl_ico_1.png
    .png
  • setting/dns_ico.png
    .png
  • setting/dns_ico_1.png
    .png
  • setting/fxui_1.png
    .png
  • setting/gj_ico.png
    .png
  • setting/gj_ico_1.png
    .png
  • tg/bd.png
    .png
  • tg/one.png
    .png
  • tg/two.png
    .png
  • uc/Thumbs.db
  • uc/abchei3.png
    .png
  • uc/changvip.png
    .png
  • uc/cz.png
    .png
  • uc/exchange.png
    .png
  • uc/fx.png
    .png
  • uc/help.png
    .png
  • uc/my_vip.png
    .png
  • uc/password.png
    .png
  • uc/pc.png
    .png
  • uc/switch_account.png
    .png
  • uc/uc_0.png
    .png
  • uc/uc_1.png
    .png
  • uc/uc_2.png
    .png
  • uc/uc_3.png
    .png
  • uc/uc_4.png
    .png
  • uc/wanshan.png
    .png
  • uc/yj.png
    .png
  • uc/yy.png
    .png
  • TapsControl.dll
    .dll windows:4 windows x86 arch:x86

    dc59956306262fa5b637056469d1a2ba


    Headers

    Imports

    Exports

    Sections

  • common.dll
    .dll windows:6 windows x86 arch:x86

    b734c909dfdee48a01dcb47d57a25663


    Headers

    Imports

    Exports

    Sections

  • data/2.pac
    .js
  • data/3.pac
    .js
  • data/Data.dat
  • jdjsq.exe
    .exe windows:5 windows x86 arch:x86

    5d00d851036f5cceb587362924a1b27c


    Headers

    Imports

    Sections

  • libcurl.dll
    .dll windows:5 windows x86 arch:x86

    bdb23c686515d63faabf036d8be91abd


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Headers

    Imports

    Exports

    Sections

  • libiconv2.dll
    .dll .ps1 windows:4 windows x86 arch:x86 polyglot

    e1835b7f4804244b03fffd302baaf1d8


    Headers

    Imports

    Exports

    Sections

  • libintl3.dll
    .dll windows:4 windows x86 arch:x86

    11d4cea984db7aee4eb18d2031242a3e


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    bb97df0f2e9321ec4e2256179b5b9c2c


    Headers

    Imports

    Exports

    Sections

  • tap-driver/certutil.exe
    .exe windows:6 windows x86 arch:x86

    7a272b918680ee931c6fd622cafba542


    Headers

    Imports

    Sections

  • tap-driver/ik.cert.pem
  • tap-driver/x64/OemVista.inf
  • tap-driver/x64/tap0901.cat
  • tap-driver/x64/tap0901.sys
    .sys windows:6 windows x64 arch:x64

    a13cebc938af36dab20cc614c6fb7e94


    Headers

    Imports

    Sections

  • tap-driver/x64/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    4dedaf984510c806d325f29e45ab7ae3


    Headers

    Imports

    Sections

  • tap-driver/x86/OemWin2k.inf
  • tap-driver/x86/tap0901.cat
  • tap-driver/x86/tap0901.sys
    .sys windows:6 windows x86 arch:x86

    7bc0e747b3ccfdebdacc897735028b04


    Code Sign

    Headers

    Imports

    Sections

  • tap-driver/x86/tapinstall.exe
    .exe windows:5 windows x86 arch:x86

    85b7d4dcb4b574dd1bbe4544947006ed


    Headers

    Imports

    Sections

  • uninst.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • update.exe
    .exe windows:5 windows x86 arch:x86

    3f95b5ddc403b3e01377047677f03cac


    Headers

    Imports

    Exports

    Sections