Static task
static1
Behavioral task
behavioral1
Sample
һڴ1.0/һڴ.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
һڴ1.0/һڴ.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
一键内存整理工具1.0/IT猫扑网.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
一键内存整理工具1.0/IT猫扑网.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
一键内存整理工具1.0/IT猫扑网_百度搜索.url
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
一键内存整理工具1.0/IT猫扑网_百度搜索.url
Resource
win10v2004-20220812-en
General
-
Target
bfa89a352071e76e6ae4efb6ca57aab7171f62db86e57a06f6096d7a5d4cc774
-
Size
149KB
-
MD5
c084fdec8ac56076c73b6b2544053fc5
-
SHA1
a923f2efee4df071baa535bdc4792d97cf40fc1f
-
SHA256
bfa89a352071e76e6ae4efb6ca57aab7171f62db86e57a06f6096d7a5d4cc774
-
SHA512
03cbf08d2ea7c447a5706ddd83749c5599b0ab03d54182b65ac7dcffb714cdc96387f205c10796224a04b3e2363399edca7041f1e0547a46b61a5d729c6c9fba
-
SSDEEP
3072:SsXQgoPZVIq/O7vGpStELJdOrJToi0dkJrkgVkSx7W8IDorsqZRUdoz3wHbwYyWN:SsggcIGpJVdmdD0dkBdOd5oUdC3wHsJ2
Malware Config
Signatures
Files
-
bfa89a352071e76e6ae4efb6ca57aab7171f62db86e57a06f6096d7a5d4cc774.zip
-
һڴ1.0/һڴ.exe.exe windows x86
ff67952875344814699ee02cd5944d92
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
EnumDesktopsA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCurrentProcessId
msvcrt
strncpy
advapi32
AdjustTokenPrivileges
ntdll
NtSetSystemInformation
Sections
.text Size: 21KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
一键内存整理工具1.0/IT猫扑网.url.url
-
一键内存整理工具1.0/IT猫扑网_百度搜索.url.url