Static task
static1
Behavioral task
behavioral1
Sample
Naruto.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Naruto.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
工具测试/PEiD_V0.95.3146450382.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
工具测试/PEiD_V0.95.3146450382.exe
Resource
win10v2004-20220812-en
General
-
Target
c43383aa20a550919f7feb62a792048aef269741e0d268ee4ae30e55efce644c
-
Size
223KB
-
MD5
b7e90d5a598b1dcbfdcf7c49aae771b4
-
SHA1
ffbc396e6a74df9c92ea57f5e035e5b51cc5c1ef
-
SHA256
c43383aa20a550919f7feb62a792048aef269741e0d268ee4ae30e55efce644c
-
SHA512
a31cf9b2ceed73be062b5a2fee12701701013bf81db2968106825ffb4d91d8546113b8258d9e98b6e68c0490f677d9ab6682a944c58f63fadcd04aca70d9da14
-
SSDEEP
6144:HHUXt0A2VYd3jc7OGkPxaC2HLxGRbBgJy+ScFeqDAz:WW5oUkPgPH9GDgle
Malware Config
Signatures
Files
-
c43383aa20a550919f7feb62a792048aef269741e0d268ee4ae30e55efce644c.zip
-
工具测试/Naruto键盘记录.zip.zip
-
Naruto.exe.exe windows x86
6fcd6099e597e73499ce199a480194fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
WriteFile
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetStringTypeW
user32
DefWindowProcA
GetForegroundWindow
GetWindowTextA
wsprintfA
BeginPaint
EndPaint
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetWindowLongA
SendMessageA
MessageBoxA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
gdi32
GetStockObject
TextOutA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
工具测试/PEiD_V0.95.3146450382.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
snk0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
snk1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE