Static task
static1
Behavioral task
behavioral1
Sample
无忧考吧题库破解补丁/Exam.exe.xml
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
无忧考吧题库破解补丁/Exam.exe.xml
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
无忧考吧题库破解补丁/Wuyou.Exam.Encrypt.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
无忧考吧题库破解补丁/Wuyou.Exam.Encrypt.dll
Resource
win10v2004-20220812-en
General
-
Target
4bbe881a5f7b2370d615edd4e19d4d5809f330cfc365444cee1d038c7fc6bbd4
-
Size
71KB
-
MD5
891021006a4183f40c8dc895883814ec
-
SHA1
16b71dcee590791c1876b292d53ea1d01bfb5b2f
-
SHA256
4bbe881a5f7b2370d615edd4e19d4d5809f330cfc365444cee1d038c7fc6bbd4
-
SHA512
2b84c4e40d59efcc03af2d59234aa59d7119e857542bc2f04b3691da7bc86b2560d098ef8c920c01aef536d4ad75e91a73173812b596b5438dde0e8a8035b4c7
-
SSDEEP
1536:u2AgJ86NhJXkgyWipaRIeHeYap9r2Z82iaVGcorAk+TJC/Esw:u2A96nJXkg1iM/09r24aiARNC8sw
Malware Config
Signatures
Files
-
4bbe881a5f7b2370d615edd4e19d4d5809f330cfc365444cee1d038c7fc6bbd4.rar
-
无忧考吧题库破解补丁/Exam.exe.config.xml
-
无忧考吧题库破解补丁/Wuyou.Exam.Encrypt.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vdata0 Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdata1 Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
无忧考吧题库破解补丁/key.dat