General

  • Target

    f7088a79dfd4cfc8fcc4cdf76628686b42b219e58d64583280a600af0282c15f

  • Size

    3.9MB

  • MD5

    0426a9487d4cc763630509c2853846fe

  • SHA1

    71bdbc70ded01d0459dbbede91a07b6c7e01fe3a

  • SHA256

    f7088a79dfd4cfc8fcc4cdf76628686b42b219e58d64583280a600af0282c15f

  • SHA512

    4c831596358822123f2c359c028e3ec5ded7d80f9c2c6fda9319e60030700851418874d331fd8fcd8ec38646471d32819d94f1308fd1d4854ccfe42f9ee71e6a

  • SSDEEP

    98304:axLjlnlZWq7jaaP9PF/HiozOkyoLjGSoir:axL0W9PF/Co7RuNir

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • f7088a79dfd4cfc8fcc4cdf76628686b42b219e58d64583280a600af0282c15f
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $0
  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ButtonLinker.dll
    .dll windows:4 windows x86 arch:x86

    8466b6530f29387ac28e94fe1e74b98f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    24a4a671f5cc294ce3543d18a1e873cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/left.bmp
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisXML.dll
    .dll windows:4 windows x86 arch:x86

    d9ee494a2a7b0d46616d9537ef3d8431


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/top.bmp
  • 7za.exe
    .exe windows:4 windows x86 arch:x86

    15847eb10d7d06dcd5980e8a9b786fd6


    Headers

    Imports

    Sections

  • AdbDev.dll
    .dll windows:5 windows x86 arch:x86

    24ba0c4a8b44db31ab9f659d83276875


    Headers

    Imports

    Exports

    Sections

  • AdbDrv.dll
    .dll windows:6 windows x86 arch:x86

    4490f262d5b6fcc3e3b5187a566f9f7f


    Headers

    Imports

    Exports

    Sections

  • AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Headers

    Imports

    Exports

    Sections

  • AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    fda9f9f5f569ddd0dbf3ad8a275a2eb8


    Headers

    Imports

    Exports

    Sections

  • AqWebBrowser.dll
    .dll windows:6 windows x86 arch:x86

    b1a74d2643090a9e386928bd93361ae0


    Headers

    Imports

    Exports

    Sections

  • CR173Soft.exe
    .exe windows:5 windows x86 arch:x86

    f1d09a514312457ff6ebd3c61333fe38


    Headers

    Imports

    Sections

  • DevMon.dll
    .dll windows:5 windows x86 arch:x86

    a4109e2c656cb5edd92e5fa5e8b6ed9e


    Headers

    Imports

    Exports

    Sections

  • DrvInst.exe
    .exe windows:5 windows x86 arch:x86

    07914fb4e8792c1b7e3d5e52257778fb


    Headers

    Imports

    Sections

  • DrvInstX64.exe
    .exe windows:5 windows x64 arch:x64

    676bfd67cd3bc6db2ae573fd2d2c000f


    Headers

    Imports

    Sections

  • FyAD.dll
    .dll windows:6 windows x86 arch:x86

    006916ea2cc9bc1f9871dad62205bf05


    Headers

    Imports

    Exports

    Sections

  • History.txt
  • IESandBox.exe
    .exe windows:5 windows x86 arch:x86

    5dff7ff3cf714962215d2c110ccfca7b


    Headers

    Imports

    Sections

  • Resource.dll
    .dll windows:5 windows x86 arch:x86

    4246b8a94cd49d264530f9b8bff6e64d


    Headers

    Imports

    Sections

  • Skin/Blue.vgstyle
  • Skin/Green.vgstyle
  • Skin/Pink.vgstyle
  • Tools/3389˿޸/Gadget.ini
  • Tools/3389˿޸/bg.png
    .png
  • Tools/3389˿޸/hot.png
    .png
  • Tools/3389˿޸/normal.png
    .png
  • Tools/CPU/Gadget.ini
  • Tools/CPU/bg.png
    .png
  • Tools/CPU/hot.png
    .png
  • Tools/CPU/normal.png
    .png
  • Tools/GroupList.ini
  • Tools/LSP޸/Gadget.ini
  • Tools/LSP޸/bg.png
    .png
  • Tools/LSP޸/hot.png
    .png
  • Tools/LSP޸/normal.png
    .png
  • Tools/ע༭/Gadget.ini
  • Tools/ע༭/bg.png
    .png
  • Tools/ע༭/hot.png
    .png
  • Tools/ע༭/normal.png
    .png
  • Tools/ʱػ/Gadget.ini
  • Tools/ʱػ/bg.png
    .png
  • Tools/ʱػ/hot.png
    .png
  • Tools/ʱػ/normal.png
    .png
  • Tools/Ҽ˵/Gadget.ini
  • Tools/Ҽ˵/bg.png
    .png
  • Tools/Ҽ˵/hot.png
    .png
  • Tools/Ҽ˵/normal.png
    .png
  • Tools//Gadget.ini
  • Tools//bg.png
    .png
  • Tools//hot.png
    .png
  • Tools//normal.png
    .png
  • Tools/Ϸ/Gadget.ini
  • Tools/Ϸ/bg.png
    .png
  • Tools/Ϸ/hot.png
    .png
  • Tools/Ϸ/normal.png
    .png
  • Tools/гʱ/Gadget.ini
  • Tools/гʱ/bg.png
    .png
  • Tools/гʱ/hot.png
    .png
  • Tools/гʱ/normal.png
    .png
  • Tools/ڴ/Gadget.ini
  • Tools/ڴ/WoptiMem_box.zip
    .zip
  • WoptiMem.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 西西软件园.txt
  • 西西软件园.url
  • Tools/ڴ/bg.png
    .png
  • Tools/ڴ/hot.png
    .png
  • Tools/ڴ/normal.png
    .png
  • Tools/ڴ/԰.txt
  • Tools/ڴ/԰.url
  • Tools/ע/Gadget.ini
  • Tools/ע/bg.png
    .png
  • Tools/ע/hot.png
    .png
  • Tools/ע/normal.png
    .png
  • Tools//Gadget.ini
  • Tools//bg.png
    .png
  • Tools//hot.png
    .png
  • Tools//normal.png
    .png
  • Tools/ȫ/Gadget.ini
  • Tools/ȫ/bg.png
    .png
  • Tools/ȫ/hot.png
    .png
  • Tools/ȫ/normal.png
    .png
  • Tools//Gadget.ini
  • Tools//bg.png
    .png
  • Tools//hot.png
    .png
  • Tools//normal.png
    .png
  • Tools/Ԥ/Gadget.ini
  • Tools/Ԥ/bg.png
    .png
  • Tools/Ԥ/hot.png
    .png
  • Tools/Ԥ/normal.png
    .png
  • Tools//Gadget.ini
  • Tools//bg.png
    .png
  • Tools//hot.png
    .png
  • Tools//normal.png
    .png
  • Tools/ٲ/Gadget.ini
  • Tools/ٲ/bg.png
    .png
  • Tools/ٲ/hot.png
    .png
  • Tools/ٲ/normal.png
    .png
  • Tools/ļ/Gadget.ini
  • Tools/ļ/bg.png
    .png
  • Tools/ļ/hot.png
    .png
  • Tools/ļ/normal.png
    .png
  • Tools/Կ/Gadget.ini
  • Tools/Կ/bg.png
    .png
  • Tools/Կ/hot.png
    .png
  • Tools/Կ/normal.png
    .png
  • Tools/۾ʿ/Gadget.ini
  • Tools/۾ʿ/bg.png
    .png
  • Tools/۾ʿ/hot.png
    .png
  • Tools/۾ʿ/normal.png
    .png
  • Uninstall.exe.nsis
  • Update.exe
    .exe windows:5 windows x86 arch:x86

    19649349a2b193d87baa8f6e04af2674


    Code Sign

    Headers

    Imports

    Sections

  • adb.exe
    .exe windows:4 windows x86 arch:x86

    879e62881b452fa51161345afb04a6de


    Headers

    Imports

    Sections

  • aqhttp.dll
    .dll windows:6 windows x86 arch:x86

    9e6113e08a4e737e8d9ed8a18fecdd0c


    Headers

    Imports

    Exports

    Sections

  • wjtg.dll
    .dll windows:5 windows x86 arch:x86

    a9e3f67a77a55cea4ff810e66a6058de


    Headers

    Imports

    Exports

    Sections

  • ־.txt
  • ˵.txt