Static task
static1
Behavioral task
behavioral1
Sample
GrasscutterTools-v1.6.5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GrasscutterTools-v1.6.5.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
opencommand-dev-1.4.0.jar
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
opencommand-dev-1.4.0.jar
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Դңƫ.url
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Դңƫ.url
Resource
win10v2004-20220901-en
General
-
Target
d4714b16658b3b57df12ae512c34578303960af3ba8df01aea60cabe3611c3e6
-
Size
1.7MB
-
MD5
38a2a76041981a34350c1cb7a0302b0f
-
SHA1
d2a152d686426a1ff044bb1ffe61c79d32e73825
-
SHA256
d4714b16658b3b57df12ae512c34578303960af3ba8df01aea60cabe3611c3e6
-
SHA512
e3d6d221b974364b0b98d8f29a7b09e1edfd1dff15e46db1a8f061f96f34bb33bc5e72537f973ea2ca57a49b05172b44aee77ccf4e0a45abaa556a941a23a007
-
SSDEEP
49152:/lCrUBmio/ji9GyxkR6eWH6BSdg1klnFDJm:/l6i+G0vQeW6B1Etm
Malware Config
Signatures
Files
-
d4714b16658b3b57df12ae512c34578303960af3ba8df01aea60cabe3611c3e6.zip
-
GrasscutterTools-v1.6.5.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
opencommand-dev-1.4.0.jar.jar
-
ƫѷ.txt
-
Դңƫ.url.url