General

  • Target

    43d854ff2dcc16e70b97ab4f80adaabb67118be92971e178b63c442954fecc11

  • Size

    1.7MB

  • MD5

    a49e51b6026706a0a2b3cec9455615b6

  • SHA1

    824dd0d3ccadcf85c1f5e846fa7ec423088710bd

  • SHA256

    43d854ff2dcc16e70b97ab4f80adaabb67118be92971e178b63c442954fecc11

  • SHA512

    bf02e489baf7f1294b2faa6abd86209bdd2347b4ac9d279b7c267c9886fd0635dc4f9692fb51f8e9782405f79f9f7d4ae9496b2efae9491772eea8790ec69eca

  • SSDEEP

    49152:U17/els3ehsd8Y8k2FWfyRSQzrjStkKr29tfOkftF1:W72lcysd8Y1wSQzKkKr29xOkfN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 43d854ff2dcc16e70b97ab4f80adaabb67118be92971e178b63c442954fecc11
    .zip
  • paysys/engine.dll
    .dll windows:4 windows x86 arch:x86

    e9352403fc03b7e19b37ad222ae71018


    Headers

    Imports

    Exports

    Sections

  • paysys/jxsf8_paysys.ini
  • paysys/kg_paysys.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • paysys/libmysql.dll
    .dll windows:4 windows x86 arch:x86

    ec4f602dd416ba0b2965525aa408b594


    Headers

    Imports

    Exports

    Sections

  • paysys/lua5.dll
    .dll windows:4 windows x86 arch:x86

    8d818a223962bddb604ebddd869be3ed


    Headers

    Imports

    Exports

    Sections