General

  • Target

    53cd36d0d496718e101f6178068db5b57325010f65302d2ec73690e85a6293e9

  • Size

    3.2MB

  • MD5

    662cb946ae83dee83caa7e9f935d83e2

  • SHA1

    abba6e65235d8077258022641cf5aded3ff031ce

  • SHA256

    53cd36d0d496718e101f6178068db5b57325010f65302d2ec73690e85a6293e9

  • SHA512

    5bbb64a16c3d4460008e20a5e4e4119d774ad24c074c78e299cd803f14fad708e88c74e1edf4a84bb4fa3a216d0d91493126bb6dd40868fb97853a3bdccc45d6

  • SSDEEP

    49152:TJXOK+QFW/+mtyZwXm5Nqlecu3/sq6O0dSlAdGze+csglXXAc+GbvZpx:lXO3QFW/+yNXcqle5/jfZmr19lnAFG/x

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 53cd36d0d496718e101f6178068db5b57325010f65302d2ec73690e85a6293e9
    .zip
  • 360/!.bat
  • 360/360verify.dll
    .dll windows:4 windows x86 arch:x86

    ce928fde4597fcf5a0df8d3d7203f05e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/MiniUI.dll
    .dll windows:4 windows x86 arch:x86

    5b53e28f658d69c835c3e142c03fb75f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/config/config.xml
  • 360/config/defaultskin/360Safe-16new.png
    .png
  • 360/config/defaultskin/MiniUI.xml
  • 360/config/defaultskin/defaultskin.ui
    .zip
  • Common/360Safe-16new.png
    .png
  • Common/360Safe.ico
  • Common/Buttom_Hover.png
    .png
  • Common/CoolUI/Button_Normal.png
    .png
  • Common/CoolUI/DlgBackground.png
    .png
  • Common/CoolUI/DlgBackground_NB.png
    .png
  • Common/CoolUI/DlgBackground_simple.png
    .png
  • Common/CoolUI/TopBanner/Mainbanner_Danger.png
    .png
  • Common/CoolUI/TopBanner/Mainbanner_Normal.png
    .png
  • Common/CoolUI/TopBanner/Mainbanner_Safe.png
    .png
  • Common/CoolUI/TopBanner/Mainbanner_Warn.png
    .png
  • Common/CoolUI/cool_dlg_with_tab.png
    .png
  • Common/CoolUI/tab/tab_background.PNG
    .png
  • Common/CoolUI/tab/tab_hover.PNG
    .png
  • Common/CoolUI/tab/tab_normal.PNG
    .png
  • Common/CoolUI/tab/tab_pushed.PNG
    .png
  • Common/DlgBackground.jpg
    .jpg
  • Common/Foreground.jpg
    .jpg
  • Common/Tips.png
    .png
  • Common/animation.gif
    .gif
  • Common/bkgnd-border.png
    .png
  • Common/button_disable.jpg
    .jpg
  • Common/button_focus.jpg
    .jpg
  • Common/button_hover.jpg
    .jpg
  • Common/button_normal.jpg
    .jpg
  • Common/button_pushed.jpg
    .jpg
  • Common/checkbox.bmp
  • Common/collapse.bmp
  • Common/dynamic_listbox_item_hover.png
    .png
  • Common/dynamic_listbox_item_normal.png
    .png
  • Common/dynamic_listbox_item_pushed.png
    .png
  • Common/error_back.png
    .png
  • Common/expand.bmp
  • Common/frame.jpg
    .jpg
  • Common/frame_border.bmp
  • Common/headerctrl_hover.bmp
  • Common/headerctrl_normal.bmp
  • Common/headerctrl_normal16.bmp
  • Common/headerctrl_pushed.bmp
  • Common/listCtrlBtn_Disable.jpg
    .jpg
  • Common/listCtrlBtn_Focus.jpg
    .jpg
  • Common/listCtrlBtn_Hover.jpg
    .jpg
  • Common/listCtrlBtn_Normal.jpg
    .jpg
  • Common/listCtrlBtn_Pushed.jpg
    .jpg
  • Common/msg_icon_check.png
    .png
  • Common/msg_icon_error.png
    .png
  • Common/msg_icon_info.png
    .png
  • Common/msg_icon_question.png
    .png
  • Common/msg_icon_warning.png
    .png
  • Common/netstateerror2.png
    .png
  • Common/netstateok2.png
    .png
  • Common/old/sys_button_close.png
    .png
  • Common/old/sys_button_max.png
    .png
  • Common/old/sys_button_menu.png
    .png
  • Common/old/sys_button_min.png
    .png
  • Common/old/sys_button_restore.png
    .png
  • Common/old/sys_dlg_close.png
    .png
  • Common/old/sys_dlg_max.png
    .png
  • Common/old/sys_dlg_min.png
    .png
  • Common/old/sys_dlg_restore.png
    .png
  • Common/old/sysmenu_close2.png
    .png
  • Common/popup_dialog_title_bar_background.bmp
  • Common/progress_ctrl_background.bmp
  • Common/progress_ctrl_fg.bmp
  • Common/radiobutton.bmp
  • Common/scrollv/background.png
    .png
  • Common/scrollv/buttons.png
    .png
  • Common/scrollv/thumb.png
    .png
  • Common/scrollv/thumbgripper.png
    .png
  • Common/sys_button_close.png
    .png
  • Common/sys_button_max.png
    .png
  • Common/sys_button_min.png
    .png
  • Common/sys_button_min2.png
    .png
  • Common/sys_button_restore.png
    .png
  • Common/sys_dlg_close.png
    .png
  • Common/sysmenu_close2.png
    .png
  • Common/tab_background.bmp
  • Common/tab_background.png
    .png
  • Common/tab_hover.PNG
    .png
  • Common/tab_normal.PNG
    .png
  • Common/tab_pushed.PNG
    .png
  • Common/title_bar_menu.png
    .png
  • Common/toolbar_hover.png
    .png
  • Common/toolbar_normal.png
    .png
  • Common/toolbar_pushed.png
    .png
  • Common/toolbar_sim_hover.png
    .png
  • Common/toolbar_sim_normal.png
    .png
  • Common/toolbar_sim_pushed.png
    .png
  • ver.txt
  • 360/deepscan/Identify/Identify.dll
    .dll windows:5 windows x86 arch:x86

    1d50a8793d3908b34fddcdbe8de92dc6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/deepscan/cloudsec2.dll
    .dll windows:4 windows x86 arch:x86

    bd851f6a0c80e70bf49e9782d55bcb03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/360NetFos.dll
    .dll windows:4 windows x86 arch:x86

    02256835b3efb01aeed56991ce05ff7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/360Speedr.ini
  • 360/netmon/360defps.dat
  • 360/netmon/360gmps.dat
  • 360/netmon/360msv.ini
  • 360/netmon/360netctrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    bf8611ca29627ff9a27a46dde4b2258b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/360netman.exe
    .exe windows:4 windows x86 arch:x86

    eae3333f076810ffe95bc9bafd2375a3


    Code Sign

    Headers

    Imports

    Sections

  • 360/netmon/360netmon.ini
  • 360/netmon/360netview.dll
    .dll windows:4 windows x86 arch:x86

    443fd4661ae69e7e73b4bfcb10762583


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/360ps.dll
    .dll windows:4 windows x86 arch:x86

    55c284f8deaa51b5bd43d9b64abb3f3d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/360tcpview.dll
    .dll windows:4 windows x86 arch:x86

    30c34096c7de090bea799d9d92541822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/Identify/lib/listpredef.dat
  • 360/netmon/Netgm.dll
    .dll windows:4 windows x86 arch:x86

    9b322f4d6b29066701410ae5015858fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/NetmonEP.dll
    .dll windows:4 windows x86 arch:x86

    f3a3b77a7c39e05ea916ec783b5cccb5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/config/netman/netman.ui
    .zip
  • bottomdlgbk.png
    .png
  • btnnetspeed1.png
    .png
  • btnnetspeed2.png
    .png
  • btnnetspeed3.png
    .png
  • btnonekey1.png
    .png
  • btnonekey2.png
    .png
  • btnonekey3.png
    .png
  • btnsetting1.png
    .png
  • btnsetting2.png
    .png
  • btnsetting3.png
    .png
  • defaultbrowser.png
    .png
  • flagclose.png
    .png
  • flaginfo.png
    .png
  • flagreboot.png
    .png
  • frameline.png
    .png
  • frameline2.png
    .png
  • listviewflag1.png
    .png
  • listviewflag1dis.png
    .png
  • listviewflag2.png
    .png
  • listviewflag2dis.png
    .png
  • listviewflag3.png
    .png
  • listviewflag3dis.png
    .png
  • msgask.png
    .png
  • msginfo.png
    .png
  • msgreboot.png
    .png
  • msgwarn.png
    .png
  • popupdlgbk.png
    .png
  • reminderdlgbk.png
    .png
  • reminderdlgcaption.png
    .png
  • reminderdlgflag.png
    .png
  • reminderdlgicon.png
    .png
  • splitbottom.png
    .png
  • splitline.png
    .png
  • tab_background.png
    .png
  • tab_hover.png
    .png
  • tab_normal.png
    .png
  • tab_pushed.png
    .png
  • tabiconconn.png
    .png
  • tabiconnetmon.png
    .png
  • tabiconps.png
    .png
  • titledlgbk.png
    .png
  • titledlgbk2.png
    .png
  • titlelogo.png
    .png
  • 360/netmon/config/netman/netman/bottomdlgbk.png
    .png
  • 360/netmon/config/netman/netman/btnnetspeed1.png
    .png
  • 360/netmon/config/netman/netman/btnnetspeed2.png
    .png
  • 360/netmon/config/netman/netman/btnnetspeed3.png
    .png
  • 360/netmon/config/netman/netman/btnonekey1.png
    .png
  • 360/netmon/config/netman/netman/btnonekey2.png
    .png
  • 360/netmon/config/netman/netman/btnonekey3.png
    .png
  • 360/netmon/config/netman/netman/btnsetting1.png
    .png
  • 360/netmon/config/netman/netman/btnsetting2.png
    .png
  • 360/netmon/config/netman/netman/btnsetting3.png
    .png
  • 360/netmon/config/netman/netman/defaultbrowser.png
    .png
  • 360/netmon/config/netman/netman/flagclose.png
    .png
  • 360/netmon/config/netman/netman/flaginfo.png
    .png
  • 360/netmon/config/netman/netman/flagreboot.png
    .png
  • 360/netmon/config/netman/netman/frameline.png
    .png
  • 360/netmon/config/netman/netman/frameline2.png
    .png
  • 360/netmon/config/netman/netman/listviewflag1.png
    .png
  • 360/netmon/config/netman/netman/listviewflag1dis.png
    .png
  • 360/netmon/config/netman/netman/listviewflag2.png
    .png
  • 360/netmon/config/netman/netman/listviewflag2dis.png
    .png
  • 360/netmon/config/netman/netman/listviewflag3.png
    .png
  • 360/netmon/config/netman/netman/listviewflag3dis.png
    .png
  • 360/netmon/config/netman/netman/msgask.png
    .png
  • 360/netmon/config/netman/netman/msginfo.png
    .png
  • 360/netmon/config/netman/netman/msgreboot.png
    .png
  • 360/netmon/config/netman/netman/msgwarn.png
    .png
  • 360/netmon/config/netman/netman/popupdlgbk.png
    .png
  • 360/netmon/config/netman/netman/reminderdlgbk.png
    .png
  • 360/netmon/config/netman/netman/reminderdlgcaption.png
    .png
  • 360/netmon/config/netman/netman/reminderdlgflag.png
    .png
  • 360/netmon/config/netman/netman/reminderdlgicon.png
    .png
  • 360/netmon/config/netman/netman/splitbottom.png
    .png
  • 360/netmon/config/netman/netman/splitline.png
    .png
  • 360/netmon/config/netman/netman/tab_background.png
    .png
  • 360/netmon/config/netman/netman/tab_hover.png
    .png
  • 360/netmon/config/netman/netman/tab_normal.png
    .png
  • 360/netmon/config/netman/netman/tab_pushed.png
    .png
  • 360/netmon/config/netman/netman/tabiconconn.png
    .png
  • 360/netmon/config/netman/netman/tabiconnetmon.png
    .png
  • 360/netmon/config/netman/netman/tabiconps.png
    .png
  • 360/netmon/config/netman/netman/titledlgbk.png
    .png
  • 360/netmon/config/netman/netman/titledlgbk2.png
    .png
  • 360/netmon/config/netman/netman/titlelogo.png
    .png
  • 360/netmon/config/pedata/pedata.ui
    .zip
  • bs11532.png
    .png
  • bs15532.png
    .png
  • bs360chrome32.png
    .png
  • bs360ge32.png
    .png
  • bs360se32.png
    .png
  • bsaoyou32.png
    .png
  • bsavant32.png
    .png
  • bscaihong32.png
    .png
  • bschrome32.png
    .png
  • bsfirefox32.png
    .png
  • bsgreenbrowser32.png
    .png
  • bshxllq32.png
    .png
  • bsie32.png
    .png
  • bsiq32.png
    .png
  • bslunascape32.png
    .png
  • bsmfllq32.png
    .png
  • bsopera32.png
    .png
  • bsqq32.png
    .png
  • bssafari32.png
    .png
  • bssg32.png
    .png
  • bstgllq32.png
    .png
  • bstm32.png
    .png
  • bstt32.png
    .png
  • bstw32.png
    .png
  • bstwchrome32.png
    .png
  • gmgame_QQfc32.png
    .png
  • gmgame_QQxw32.png
    .png
  • gmgame_QQys32.png
    .png
  • gmgame_QQzyhx32.png
    .png
  • gmgame_StarCraft32.png
    .png
  • gmgame_cf32.png
    .png
  • gmgame_cfol32.png
    .png
  • gmgame_dhxy332.png
    .png
  • gmgame_dtws32.png
    .png
  • gmgame_dxcyys32.png
    .png
  • gmgame_jgsj32.png
    .png
  • gmgame_jianxian32.png
    .png
  • gmgame_jwt32.png
    .png
  • gmgame_jxqy332.png
    .png
  • gmgame_lzg32.png
    .png
  • gmgame_mhxy32.png
    .png
  • gmgame_mhzx32.png
    .png
  • gmgame_moyu32.png
    .png
  • gmgame_msg32.png
    .png
  • gmgame_mxdOL32.png
    .png
  • gmgame_penglai32.png
    .png
  • gmgame_ppkdc32.png
    .png
  • gmgame_rxjh32.png
    .png
  • gmgame_sgsOL32.png
    .png
  • gmgame_smOL32.png
    .png
  • gmgame_smdl32.png
    .png
  • gmgame_tianlong232.png
    .png
  • gmgame_tianxia232.png
    .png
  • gmgame_wendao32.png
    .png
  • gmgame_wow32.png
    .png
  • gmgame_xunxian32.png
    .png
  • gmgame_xwlwz32.png
    .png
  • gmgame_xyj32.png
    .png
  • gmgame_yhzt32.png
    .png
  • gmgame_yzOL32.png
    .png
  • gmgame_zdzw32.png
    .png
  • gmgame_zhengtu32.png
    .png
  • gmgame_zhuxian232.png
    .png
  • gmgame_zxy32.png
    .png
  • 360/netmon/lmtps.dat
  • 360/netmon/netdrv/50/360netmon_50.sys
    .sys windows:6 windows x86 arch:x86

    188c2eabeb66b6d04b7df5a15dbaee24


    Code Sign

    Headers

    Imports

    Sections

  • 360/netmon/netdrv/60/360netmon_60.sys
    .sys windows:6 windows x86 arch:x86

    e72453895cbd27b41782d4a1a81c2f6a


    Code Sign

    Headers

    Imports

    Sections

  • 360/netmon/netdrv/x64/360netmon_x64.sys
    .sys windows:6 windows x64 arch:x64

    8752763d4aa1413bd8b0360dada88a72


    Code Sign

    Headers

    Imports

    Sections

  • 360/netmon/netmstart.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5afd6ee4b3306e1340a2c897c0daed2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/nmver.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5c54715227e960c5019e7a45d4b9d02a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/skin/default.uil
    .zip
  • infownd/background.png
    .png
  • infownd/bargreen.png
    .png
  • infownd/barorange.png
    .png
  • infownd/defaultfileicon.png
    .png
  • infownd/numbers0.png
    .png
  • infownd/numbers1.png
    .png
  • infownd/numbers2.png
    .png
  • infownd/numbers3.png
    .png
  • infownd/numbers4.png
    .png
  • infownd/numbers5.png
    .png
  • infownd/numbers6.png
    .png
  • infownd/numbers7.png
    .png
  • infownd/numbers8.png
    .png
  • infownd/numbers9.png
    .png
  • infownd/numbersdot.png
    .png
  • infownd/protect.png
    .png
  • infownd/protectline.png
    .png
  • infownd/spannerhover.png
    .png
  • infownd/spannernormal.png
    .png
  • infownd/spannerpushed.png
    .png
  • infownd/sysfileicon.png
    .png
  • infownd/tabbtnhover.png
    .png
  • infownd/tabbtnpushed.png
    .png
  • infownd/unitsgb.png
    .png
  • infownd/unitskb.png
    .png
  • infownd/unitsmb.png
    .png
  • infownd/unitstb.png
    .png
  • infownd/weather.png
    .png
  • modewnd/background.png
    .png
  • modewnd/hovermask.png
    .png
  • modewnd/modegame.png
    .png
  • modewnd/modegameselected.png
    .png
  • modewnd/modeweb.png
    .png
  • modewnd/modewebselected.png
    .png
  • modewnd/selectedmask.png
    .png
  • protectwnd/background.png
    .png
  • protectwnd/btnclosehover.png
    .png
  • protectwnd/btnclosenormal.png
    .png
  • protectwnd/btnclosepushed.png
    .png
  • protectwnd/protect.png
    .png
  • skinme.dat
  • speedwnd/background.png
    .png
  • speedwnd/btnmodedisablehover.png
    .png
  • speedwnd/btnmodedisablenormal.png
    .png
  • speedwnd/btnmodedisablepushed.png
    .png
  • speedwnd/btnmodegamehover.png
    .png
  • speedwnd/btnmodegamenormal.png
    .png
  • speedwnd/btnmodegamepushed.png
    .png
  • speedwnd/btnmodewebhover.png
    .png
  • speedwnd/btnmodewebnormal.png
    .png
  • speedwnd/btnmodewebpushed.png
    .png
  • speedwnd/hilight.png
    .png
  • tipswnd/background.png
    .png
  • tipswnd/btnclosehover.png
    .png
  • tipswnd/btnclosenormal.png
    .png
  • tipswnd/btnclosepushed.png
    .png
  • tipswnd/info.png
    .png
  • tipswnd/modegame.png
    .png
  • 360/netmon/sysmon.dll
    .dll windows:4 windows x86 arch:x86

    a709adaa9409a93598359fa4c567aed3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/netmon/userps.ini
  • 360/safemon/360compro.dll
    .dll windows:4 windows x86 arch:x86

    811dd9c87a23b2a08c94d9ca7c4469fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/safemon/360tray.exe
    .exe windows:4 windows x86 arch:x86

    82d5d748fc551c74d43f68fee8f3ee99


    Code Sign

    Headers

    Imports

    Sections

  • 360/safemon/config.ini
  • 360/safemon/netm.tpi
    .dll windows:4 windows x86 arch:x86

    8e7db2dc1a9d27555d6d309e9656a06a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/safemon/netmon.tpi
    .dll windows:4 windows x86 arch:x86

    050f6e7f332a25392bb8c75403876b5d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 360/uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/dmcl.ini
  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsplugin.dll
    .dll windows:4 windows x86 arch:x86

    214e6840266876a8fd4e8310469c01cc


    Headers

    Imports

    Exports

    Sections

  • $TEMP/AlgorithmLib.dll
    .dll windows:5 windows x86 arch:x86

    9cca28177a7262e93390179ed1fb2217


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/EfiMon.sys
    .sys windows:5 windows x86 arch:x86

    e255878f84db8d1a1b600c266d42b97f


    Code Sign

    Headers

    Imports

    Sections

  • $TEMP/EfiProc.dll
    .dll windows:4 windows x86 arch:x86

    8a13fb436dc19f441577e082e8d99c0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/SafeDriverCtrl.dll
    .dll windows:5 windows x86 arch:x86

    de623377fc166efce9f71b724efa10a2


    Code Sign

    Headers

    Imports

    Exports

    Sections