Static task
static1
Behavioral task
behavioral1
Sample
连发程序.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
连发程序.exe
Resource
win10v2004-20220901-en
General
-
Target
2c7fa940e6871968b1734f53c40ecd9313b0f7b4e9eccdfc932c28dc333a4551
-
Size
376KB
-
MD5
7e27ac582e40b97dca9c81e648b83189
-
SHA1
079d22ef0c376eb0c5ab1fbe3a983ca707476d63
-
SHA256
2c7fa940e6871968b1734f53c40ecd9313b0f7b4e9eccdfc932c28dc333a4551
-
SHA512
f7b8c4920a4b360db969dab0e2985fda8beca0d41a16dbb47fa94ffb219d535340902173da399f3c67158b558ad259cde436494fad56aa711f5697b015f5dbef
-
SSDEEP
6144:s0tpoHqr2ouHMremb2DgGKJivwikbRRZBVSPKC186I6GKlrFMu7T4LixgBeXmn1j:Jtp+ouYemaUGKJi5mSPb1Plau7daE21j
Malware Config
Signatures
Files
-
2c7fa940e6871968b1734f53c40ecd9313b0f7b4e9eccdfc932c28dc333a4551.rar
-
连发程序.exe.exe windows x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE