General

  • Target

    5bdc0f75a9f85a09d9e656d5a9b2ddc21022ca78800545662a46b55a6f3e4200

  • Size

    8.9MB

  • MD5

    b62424b169930bc29b071c14dc789f17

  • SHA1

    56ad276e0e7d6bce77bbda4b5f70d6634a2b3be6

  • SHA256

    5bdc0f75a9f85a09d9e656d5a9b2ddc21022ca78800545662a46b55a6f3e4200

  • SHA512

    e039190a081cfb14e0339568de6f85a2c1a81ae87089eb15fea384afe1934d1fc1788e7dfca0d7aed4626bbcf2b30eab671b3c39aef420d3bb5472ddd7664386

  • SSDEEP

    196608:JBkYkcFcz+GT9e21I2GLy0lC9Sb+azzH/rndyYA+g2FZC5uJNJp:gEczZT9e7y0QnuHDntA+PTC5uJXp

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 6 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bdc0f75a9f85a09d9e656d5a9b2ddc21022ca78800545662a46b55a6f3e4200
    .zip
  • 【GM工具】/Galaxy2d.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 【GM工具】/WString2ID.dll
    .dll windows:5 windows x86 arch:x86

    e5362844feef46900ebe5d9355eae231


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/astart.dll
    .dll windows:5 windows x86 arch:x86

    bc3b7e2c5caa8bbca71f28b1ca58690c


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/cjson.dll
    .dll windows:5 windows x86 arch:x86

    c82bca37b8f21d471eacf95a8f265dbc


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/config.ini
  • 【GM工具】/fmod.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 【GM工具】/g2d.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 【GM工具】/g2d.exe
    .exe windows:5 windows x86 arch:x86

    2d37604677c89688b7f25767a0e023b9


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/galaxy2d.log
  • 【GM工具】/glow.dll
    .dll windows:5 windows x86 arch:x86

    45374b5cdaacc4f0eda05c335a4d3112


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/gsub.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 【GM工具】/lfs.dll
    .dll windows:5 windows x86 arch:x86

    a69bbcfd43263fd8be0f34203159db44


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/lua51.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • 【GM工具】/luahp.dll
    .dll windows:5 windows x86 arch:x86

    8531af18f9aaf24570a3c5c0d9deecd0


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/minizip.dll
    .dll windows:5 windows x86 arch:x86

    a4236ca67152bb97cbf603586bf4cbcb


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • 【GM工具】/start.dll
    .jpg
  • 【GM工具】/stop.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 【GM工具】/wdf/gj.wdf
  • 【GM工具】/wdf/迭代.wdf
  • 【GM工具】/卡号数据/80万点卡.txt
  • 【工具使用说明】/0.jpg
    .png
  • 【工具使用说明】/1.充值操作.png
    .png
  • 【工具使用说明】/3.定制装备.png
    .png
  • 【工具使用说明】/4.游戏管理.png
    .png
  • 【工具使用说明】/5.角色管理.png
    .png
  • 【工具使用说明】/6.宝宝管理.png
    .png
  • 【工具使用说明】/7.赠送物品.png
    .png
  • 【工具使用说明】/8.自动抓鬼和月卡等兑换.jpg
    .jpg