General

  • Target

  • Size

    9.5MB

  • MD5

    269d7072247c366a7b9a20cc0700b152

  • SHA1

    ff002d0ce1913b7355aa4ecff69c5c1b37c5b928

  • SHA256

    062614ebf4a31cf84a4e1d068b20c0d43f50899b72fff3c4f4be1d0308cced21

  • SHA512

    bfc03f044ba2e0ef884a806380b1c04375184511b0be44e150da4c717175e344010928ad1d31b423700d083de55b9919671904b6d97273118ab7c0eb897cc369

  • SSDEEP

    196608:HVjrz5GvcVnhhRipIuqc8Z/QOQfab+VdVMmGKNlnUtTWYQnM:HxrFEcreXqc8Z/QLfM+VXgTp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • PVZ_XJZB@[email protected]
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CMyControl.dll
    .dll windows:6 windows x86 arch:x86

    666554f89a4b0c637c2db8481aa22f46


    Headers

    Imports

    Exports

    Sections

  • HttpLib.dll
    .dll windows:6 windows x86 arch:x86

    66579f10a63755bd9d0bb57f51333bfc


    Headers

    Imports

    Exports

    Sections

  • Installer.exe
    .exe windows:6 windows x86 arch:x86

    4478ec1970cf3cd1b4109445ab2d2754


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MainXjzb.exe
    .exe windows:6 windows x86 arch:x86

    ad436e3ed42b9c4d5f71c713d4db5559


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l2-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-misc-l1-1-0.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • config/chace.ini
  • filelists.xml
    .xml
  • mfc140.dll
    .dll windows:6 windows x64 arch:x64

    ba205113c6409fc99b30d9eb9213979b


    Code Sign

    Headers

    Imports

    Sections

  • mfc140u.dll
    .dll windows:6 windows x86 arch:x86

    69a524d8c5a64498803b1582689d3cc3


    Code Sign

    Headers

    Imports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x86 arch:x86

    6dbd7763e94344402d4206b7bab40e1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • src/2wm.png
    .png
  • src/2wm_a.png
    .png
  • src/Edit_Normal.png
    .png
  • src/Hotrecs_0.png
    .png
  • src/Hotrecs_1.png
    .png
  • src/Hotrecs_2.png
    .png
  • src/Hotrecs_3.png
    .png
  • src/Hotrecs_4.png
    .png
  • src/Hotrecs_5.png
    .png
  • src/Hotrecs_6.png
    .png
  • src/Hotrecs_7.png
    .png
  • src/Hotrecs_8.png
    .png
  • src/Hotrecs_9.png
    .png
  • src/SerialNum_0.png
    .png
  • src/SerialNum_1.png
    .png
  • src/SerialNum_2.png
    .png
  • src/SerialNum_3.png
    .png
  • src/SerialNum_4.png
    .png
  • src/SerialNum_5.png
    .png
  • src/SerialNum_6.png
    .png
  • src/SerialNum_7.png
    .png
  • src/SerialNum_8.png
    .png
  • src/SerialNum_9.png
    .png
  • src/bottom.png
    .png
  • src/close.png
    .png
  • src/copyid.png
    .jpg
  • src/gameDefault.png
    .png
  • src/gamesxl.bmp
  • src/icon.png
    .png
  • src/kf.png
    .png
  • src/list_vscroll.bmp
  • src/phone.png
    .png
  • src/pic.png
    .jpg
  • src/picD.png
    .png
  • src/sure.png
    .png
  • src/tsfk.png
    .png
  • src/wx.png
    .png
  • src/wxzfico.png
    .png
  • src/xsyh.png
    .png
  • src/xsyhclose.png
    .png
  • src/zfb.png
    .png
  • src/zfbico.png
    .png
  • vcruntime140.dll
    .dll windows:6 windows x86 arch:x86

    6a84b7445ccacd5d29ac27de2745f356


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:6 windows x86 arch:x86

    216575e6d6c0ef5a78c78fb8a04f982e


    Code Sign

    Headers

    Imports

    Exports

    Sections