General

  • Target

    f2683fad85dcdcf71d0354ae8cbb04fa6507170fa62f68d2177bf4195306ab5b

  • Size

    14.3MB

  • MD5

    02261502ee0ba5b65653a71ca2b35d63

  • SHA1

    bed032ec286a32ce67caa7b1508ff60310a96bdc

  • SHA256

    f2683fad85dcdcf71d0354ae8cbb04fa6507170fa62f68d2177bf4195306ab5b

  • SHA512

    8b2b3fd3c5eedfe476f928eb0f79aa6baa0af17f1d83eee37de36dd07f948bdad2a9ce6f77ce4c87f16e10c15dd87b844801a7598cb87c5aedb4caf5ee614385

  • SSDEEP

    393216:jHI5DZAcdSXZkDM3sjhKeiyRT9rj7OFQofWh0iW7ySxj:jHI5d0ZeM3sceicr3XGWdayaj

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 49 IoCs

    Checks for missing Authenticode signature.

Files

  • f2683fad85dcdcf71d0354ae8cbb04fa6507170fa62f68d2177bf4195306ab5b
    .zip
  • ��������9.61��52pojie��/CommondInfo.xml
    .xml
  • ��������9.61��52pojie��/Import.log
  • ��������9.61��52pojie��/Importer.exe
    .exe windows:4 windows x86 arch:x86

    e630a52e99cba1c17ccb05f90aaddfb1


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/QMColorActionCtl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    278ce3f6bca07a736fa9bba94f7a89b1


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/Recorder.exe
    .exe windows:5 windows x64 arch:x64

    2839cb0ebb031fc4407ca6c9690cb465


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/Syntconv.dll
    .dll windows:4 windows x86 arch:x86

    52fb12c4da53f5f2692b33e73eefd8da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    e0cb36c66e5c120ef20ebc4f30366345


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    e3493c33b4da4c9e132164b491c5d2cc


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/doc/command.ini
    .vbs
  • ��������9.61��52pojie��/doc/command.xml
    .vbs .xml polyglot
  • ��������9.61��52pojie��/doc/syntax.xml
  • ��������9.61��52pojie��/doc/web.ico
  • ��������9.61��52pojie��/kne.dll
    .dll windows:4 windows x86 arch:x86

    e3493c33b4da4c9e132164b491c5d2cc


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/lib/API.html
    .html
  • ��������9.61��52pojie��/lib/API.qml
    .vbs
  • ��������9.61��52pojie��/lib/����.qml
    .vbs
  • ��������9.61��52pojie��/lib/����.html
    .html
  • ��������9.61��52pojie��/lib/����.qml
    .vbs
  • ��������9.61��52pojie��/lib/����.html
    .html
  • ��������9.61��52pojie��/lib/����.qml
    .vbs
  • ��������9.61��52pojie��/lib/�㷨.html
    .html
  • ��������9.61��52pojie��/lib/�㷨.qml
    .vbs
  • ��������9.61��52pojie��/lib/ͼ��.html
    .html
  • ��������9.61��52pojie��/lib/ͼ��.qml
    .vbs
  • ��������9.61��52pojie��/lib/����.html
    .html
  • ��������9.61��52pojie��/lib/����.qml
    .vbs
  • ��������9.61��52pojie��/lib/����.html
    .html
  • ��������9.61��52pojie��/lib/����.qml
    .vbs
  • ��������9.61��52pojie��/lib/�ļ�.html
    .html
  • ��������9.61��52pojie��/lib/�ļ�.qml
    .vbs
  • ��������9.61��52pojie��/lib/ϵͳ.html
    .html
  • ��������9.61��52pojie��/lib/ϵͳ.qml
  • ��������9.61��52pojie��/mmt/�������͡�.mt9
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • ��������9.61��52pojie��/mmt/Ĭ�Ϸ���.ini
  • ��������9.61��52pojie��/picker.dll
    .dll windows:4 windows x86 arch:x86

    7422286e01cb866f6aa635902a4b9e4d


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/picker.exe
    .exe windows:5 windows x86 arch:x86

    7e3e1522d038b72210f7b3de6fc6b4b4


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/plugin/Access.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    12f16fbbd78ab57b166adcb102988cd5


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Access.ini
  • ��������9.61��52pojie��/plugin/Access.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb66623ce26efeaab6fd8bfc68484b03


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Bkgnd.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9c733a9cb001aeccfd9f3ab4c40e8c93


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Bkgnd.ini
  • ��������9.61��52pojie��/plugin/Bkgnd.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    13760d57ff82474a3bbfa7c1561e4413


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/BkgndColor.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0b501e04791adaf9382223e7d946167b


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/BkgndColor.ini
  • ��������9.61��52pojie��/plugin/Color.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7f64cff0859bcb2ffcb4cfb7b9065763


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Color.ini
  • ��������9.61��52pojie��/plugin/Color.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    78cfb62b497e49781501abac8bc50d61


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/ColorEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    41093615c11ad02fcdcef71db8b7939c


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/ColorEx.ini
  • ��������9.61��52pojie��/plugin/ColorEx.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    594875067d04ba866f91089ee4af751c


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Console.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3ee25517d80f50b3dc6c3077fe84ed0f


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Console.ini
  • ��������9.61��52pojie��/plugin/Console.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    3a72b91329e847f69e48f79053a696ac


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Encrypt.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f27e57f8fa92e554d02a3c00a459e267


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Encrypt.ini
  • ��������9.61��52pojie��/plugin/Encrypt.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    6b0dd5c8a12a53dec2629ffc03a93994


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/File.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6a793c63e5e4df48e38cafb11494ec68


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/File.ini
  • ��������9.61��52pojie��/plugin/File.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    4f988188dc4adc4db8d4689ea1406bdf


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/GetSysInfo.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c7e26a54a63442c678a21968d23a3416


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/GetSysInfo.ini
  • ��������9.61��52pojie��/plugin/Media.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ad4a40c665cadb0f107e26d05c0debd6


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Media.ini
  • ��������9.61��52pojie��/plugin/Media.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    baae46ef61cc570a6eaf2828c5d4421d


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Memory.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    782fb5d2779c606c6cb3e9c92d6db5a7


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Memory.ini
  • ��������9.61��52pojie��/plugin/Memory.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    27c11bf7786b4576b67e23bdaed234d3


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Msg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b46d4bcb11d7d8fd1063b547af1e2abf


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Msg.ini
  • ��������9.61��52pojie��/plugin/Msg.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    3a72b91329e847f69e48f79053a696ac


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Net.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f31db322725c89acdcdc646dbdcd3bb6


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Net.ini
  • ��������9.61��52pojie��/plugin/Net.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    71b83bfea469e035f23fae947b9dbaab


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Office.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a5b7bd06a57b388720df7a32bdb4c583


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Office.ini
  • ��������9.61��52pojie��/plugin/Office.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    cb66623ce26efeaab6fd8bfc68484b03


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Oracle.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3d9ffda3fa1c6ad82ea32454c092ded3


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Oracle.ini
  • ��������9.61��52pojie��/plugin/Oracle.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    3a72b91329e847f69e48f79053a696ac


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Pic.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    30753a1f6fd0de4b3601b4011fe9ca44


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Pic.ini
  • ��������9.61��52pojie��/plugin/Pic.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    13760d57ff82474a3bbfa7c1561e4413


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/SQLServer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    94f483cf8591bce164399e5746a83e92


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/SQLServer.ini
  • ��������9.61��52pojie��/plugin/SQLServer.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    3a72b91329e847f69e48f79053a696ac


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Sys.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e93bfeb76c64ccc394a705e60434beee


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Sys.ini
  • ��������9.61��52pojie��/plugin/Sys.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    067adff9f8d6f519fc9879f917db686e


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/SysEx.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4b278f2a93a57e710c84f597d1b1f90e


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/SysEx.ini
  • ��������9.61��52pojie��/plugin/SysEx.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    f8116acd1f9e513715235912d568252a


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Web.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3bda4e16faafbd5c4a3fdaf434f98b0a


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Web.ini
  • ��������9.61��52pojie��/plugin/Web.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    1dd42d909878556a24bcf89e394115d8


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Window.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    23c0230a3203b217bd8c3dbcb089c026


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/plugin/Window.ini
  • ��������9.61��52pojie��/plugin/Window.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    067adff9f8d6f519fc9879f917db686e


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/qmacro.ini
  • ��������9.61��52pojie��/qmc/3030394639324442303045384343464636383033423543433634414443424444.lc
    .zip
  • ��������9.61��52pojie��/qmc/3139414530443136304441343238303142353534424643463138454138363643.lc
    .zip
  • ��������9.61��52pojie��/qmc/3142433530334241394133463445314544324442414338393335324142313935.lc
    .zip
  • ��������9.61��52pojie��/qmc/3142464644394532434638333630373937364245444433423642373346323038.lc
    .zip
  • ��������9.61��52pojie��/qmc/3242394142453636353736303143433833424342324330373536373542443945.lc
    .zip
  • ��������9.61��52pojie��/qmc/3246443837413736334641424246433343373346313639363336394631313930.lc
    .zip
  • ��������9.61��52pojie��/qmc/3337393033394330343833444533364344363542324641383838453630334444.lc
    .zip
  • ��������9.61��52pojie��/qmc/3339313737414633383541463344393237374339303445363636373738413438.lc
    .zip
  • ��������9.61��52pojie��/qmc/3346324533333332373835323633433942363943393942323431333645324244
    .zip
  • ��������9.61��52pojie��/qmc/3434374330333633433344443545344239324238414138454332444135454137.lc
    .zip
  • ��������9.61��52pojie��/qmc/3436353742373345394537314337324337364344314344454631444138414636.lc
    .zip
  • ��������9.61��52pojie��/qmc/3530424631454542364338334241423242354133313445323637443445373742.lc
    .zip
  • ��������9.61��52pojie��/qmc/3534333433413135454532463131334244344237304139353045334346373344.lc
    .zip
  • ��������9.61��52pojie��/qmc/3537413637373644464444393942343546393532443444394139373130303043.lc
    .zip
  • ��������9.61��52pojie��/qmc/3742344234453642433546424143354539454632423237373642384637443233.lc
    .zip
  • ��������9.61��52pojie��/qmc/3846443231433232354534334434364341333143413932414343443139423230.lc
    .zip
  • ��������9.61��52pojie��/qmc/4131464345424132393532454341374535383939384543384239433834344245
    .zip
  • ��������9.61��52pojie��/qmc/4134414141323432334633323846314242303834323539314235343435414638.lc
    .zip
  • ��������9.61��52pojie��/qmc/4142454438453244414134384341433043353435464139434142313442354434.lc
    .zip
  • ��������9.61��52pojie��/qmc/4233323537414444423330424345383035423232323738384338463743343834.lc
    .zip
  • ��������9.61��52pojie��/qmc/4235463433344446344335313339453746413543353435424134453835463239.lc
    .zip
  • ��������9.61��52pojie��/qmc/4236464643414231393837323235394237323437333536373142443145363930.lc
    .zip
  • ��������9.61��52pojie��/qmc/4244443438344145453732454632423632374145394435313938313645464341
    .zip
  • ��������9.61��52pojie��/qmc/4330464337464146393134373941413542433645303442384642423537314131.lc
    .zip
  • ��������9.61��52pojie��/qmc/4335394639383435313331383432443643363535364342414537304430373037.lc
    .zip
  • ��������9.61��52pojie��/qmc/4341413739334243383637303543373844424531384237313142443444333135.lc
    .zip
  • ��������9.61��52pojie��/qmc/4532433038334639323930304437394237314132393244323843303037374341
    .zip
  • ��������9.61��52pojie��/qmc/4536434141314642443434423936434437353244453033464437344432324546
    .zip
  • ��������9.61��52pojie��/qmc/4543444546343630363935464345444246383741343043453544333434464145.lc
    .zip
  • ��������9.61��52pojie��/qmc/4545384233463343463142394334313438334530414339314441313343314437.style
  • ��������9.61��52pojie��/qmc/4632304544303643393741423645414230443734314145354645464245334335
    .zip
  • ��������9.61��52pojie��/qmc/QMShow/18
  • ��������9.61��52pojie��/qmc/QMShow/19
  • ��������9.61��52pojie��/qmc/QMShow/index.dat
  • ��������9.61��52pojie��/refs.dll
    .dll windows:5 windows x86 arch:x86

    fbeb4357592c9ba44cf88121499db022


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/refs64.dll
    .dll windows:5 windows x64 arch:x64

    0a6e7c480a6ce148356b7c0e89402464


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/rjhook.dll
    .dll windows:4 windows x86 arch:x86

    e3493c33b4da4c9e132164b491c5d2cc


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/tools/Merge/Languages/TortoiseMerge2052.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/TortoiseMerge.exe
    .exe windows:4 windows x86 arch:x86

    cb7c3f73500194bd12816706a458ff08


    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/intl3_svn.dll
    .dll windows:4 windows x86 arch:x86

    3761595a8e4b18475b752a438167c12a


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/libapr_tsvn.dll
    .dll windows:4 windows x86 arch:x86

    2e00c0d99ce9edb2f3be2c5d9c356acd


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/libapriconv_tsvn.dll
    .dll windows:4 windows x86 arch:x86

    7959cb240b2d58d2b9d6056e2ce74523


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/libaprutil_tsvn.dll
    .dll windows:4 windows x86 arch:x86

    d720325bdc518bbb5eecae9ef8e03219


    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    4ca444b09cab86ae48fe835cb05c6e94


    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    6488997e312be12f8300ea7b1c34d497


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/tools/Merge/bin/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    7fecbc4a16a5dc85a5394a1df6217680


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ��������9.61��52pojie��/uservar.ini
  • ��������9.61��52pojie��/wqm.exe
    .exe windows:5 windows x86 arch:x86

    399dd6c19a3202685045179d5c3a4ff8


    Code Sign

    Headers

    Imports

    Sections

  • ��������9.61��52pojie��/��������9.exe
    .exe windows:4 windows x86 arch:x86

    13f2c51465f152c72f1f074648f2bd8c


    Code Sign

    Headers

    Imports

    Exports

    Sections