General

  • Target
    01ee6aa88ccfb589bde33b360ad45300_NEAS
  • Size 3.0MB
  • Sample240507-xdc7nsaa2t
  • SHA256 3f95350bec78f3895ea0c097358108f965eadfd3063d3754db8f864f3a5cbb6e
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 01ee6aa88ccfb589bde33b360ad45300_NEAS
    .exe 3.0MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • DmMain.dll
    .dll 1.1MB
  • cef.log
    11KB
  • config.ini
    417B
  • ltzn.exe
    .exe 1.1MB
  • ui/layout/dmindex.xml
    451B
  • ui/layout/xml/dui_gamewnd.xml
    1KB
  • ui/layout/xml/dui_ie.xml
    280B
  • ui/layout/xml/dui_loginwnd.xml
    2KB
  • ui/layout/xml/dui_popup.xml
    423B
  • ui/layout/xml/global.xml
    1KB
  • ui/themes/dmindex.xml
    257B
  • ui/themes/theme0/dmindex.xml
    1KB
  • ui/themes/theme0/image/anima.png
    .png 50KB
  • ui/themes/theme0/image/btn_bosskey.png
    .png 3KB
  • ui/themes/theme0/image/btn_cancel.png
    .png 996B
  • ui/themes/theme0/image/btn_clear_cache.png
    .png 3KB
  • ui/themes/theme0/image/btn_close.png
    .png 1KB
  • ui/themes/theme0/image/btn_gonglue.png
    .png 2KB
  • ui/themes/theme0/image/btn_home.png
    .png 8KB
  • ui/themes/theme0/image/btn_kefu.png
    .png 8KB
  • ui/themes/theme0/image/btn_libao.png
    .png 8KB
  • ui/themes/theme0/image/btn_login_charge.png
    .png 28KB
  • ui/themes/theme0/image/btn_login_close.png
    .png 3KB
  • ui/themes/theme0/image/btn_login_gift.png
    .png 31KB
  • ui/themes/theme0/image/btn_login_home.png
    .png 28KB
  • ui/themes/theme0/image/btn_login_min.png
    .png 2KB
  • ui/themes/theme0/image/btn_login_service.png
    .png 28KB
  • ui/themes/theme0/image/btn_max.png
    .png 1KB
  • ui/themes/theme0/image/btn_min.png
    .png 1KB
  • ui/themes/theme0/image/btn_ok.png
    .png 977B
  • ui/themes/theme0/image/btn_refresh.png
    .png 3KB
  • ui/themes/theme0/image/btn_restore.png
    .png 1KB
  • ui/themes/theme0/image/main.png
    .png 2KB
  • ui/themes/theme0/image/wnd_game_title.png
    .png 1KB
  • ui/themes/theme0/image/wnd_login.png
    .png 853KB
  • ui/themes/theme0/image/wnd_popup_background.png
    .png 43KB
  • uninst.exe
    .exe 412KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 4KB
  • uninst.exe.nsis
    16KB

01ee6aa88ccfb589bde33b360ad45300_NEAS

  • IMPHASH 7eae418c7423834ffc3d79b4300bd6fb
  • SHA256 3f95350bec78f3895ea0c097358108f965eadfd3063d3754db8f864f3a5cbb6e
  • MD5 SHA1 SHA512 SSDEEP
Digest
c4:bd:df:0a:7d:27:99:36:11:ae:94:eb:17:7b:0b:1d:33:af:d4:72
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=南充创思网络科技有限公司,O=南充创思网络科技有限公司,L=南充市,ST=四川省,C=CN
Minor OS version
0
Major OS version
4
Entry point
13252
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths