General

  • Target

    200fc84da4a6fb1f2364f7dec9add00014adcb61c5e6806e57bfbeeed5c0d1f5

  • Size

    7.3MB

  • MD5

    27553dd3309d488d1c245f95d76762af

  • SHA1

    7c9eeb103befd6dba99e643a51964cb62754c087

  • SHA256

    200fc84da4a6fb1f2364f7dec9add00014adcb61c5e6806e57bfbeeed5c0d1f5

  • SHA512

    69097a426703dcb51f3c22e27bc9e739ba82d1dd6d8877010e835f9e2aba20121e499c6df9692bdee6b1a46ed2daa4cdaa2728f8af554a0d409a550491fa08c8

  • SSDEEP

    196608:inavcHZErHIY0hc/vVCJQobNqN963KB6Sh2VovOe:Q8HIYgc3VSDN+hB6piOe

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 200fc84da4a6fb1f2364f7dec9add00014adcb61c5e6806e57bfbeeed5c0d1f5
    .zip
  • gm后台/DNF.mdb
  • gm后台/GM使用教程.docx
    .docx office2007
  • gm后台/GM工具管理员运行.exe
    .exe windows:4 windows x86 arch:x86

    ba06fc1663f0bdecf0e31ecffab04d88


    Headers

    Imports

    Sections

  • gm后台/超级GM工具单机数据.dat
  • 游戏攻略.jpg
    .jpg
    • http://weixin.qq.com/r/eThlfXnE_CSHrT0e921r