Static task
static1
Behavioral task
behavioral1
Sample
getip/地址发布程序.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
getip/地址发布程序.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
getip/永久地址【国内需使用代理或翻墙才可打开】.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
getip/永久地址【国内需使用代理或翻墙才可打开】.url
Resource
win10v2004-20220812-en
General
-
Target
e39f441c511d7fab8185b2fe0cda308a4d708a5558550efce3b571c2b3739594
-
Size
2.6MB
-
MD5
b696c2ca1a5e0c004d502b64e3ec8f86
-
SHA1
8054cf80fc66bd78176a5874d1b29625777fe1df
-
SHA256
e39f441c511d7fab8185b2fe0cda308a4d708a5558550efce3b571c2b3739594
-
SHA512
3a4548126b5258b9566b8ba8a0307769c9e9a1537a32136e5a7d7a03380e79c1271222ece2ab92eade303b6716a702a3ddc93c0b95c96ac42b10f2e173d4326d
-
SSDEEP
49152:uEp/2EvjWezuxYqua4zY6/ZEdYE5DjfziiA+KTY7JwK65n5BtTGQa8eBinl:uE12Ev6YquNsSZ9WfOiREYNw/FBTvoil
Malware Config
Signatures
Files
-
e39f441c511d7fab8185b2fe0cda308a4d708a5558550efce3b571c2b3739594.rar
-
少女们的冒险记事1-2.61/getip(new).rar.rar
-
getip/关于“地址发布程序”被误报病毒的说明.txt
-
getip/地址发布程序.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 94KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gjrjgtbm Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fbaukkri Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
getip/帮助文档【国内会员请务必看我】.txt
-
getip/永久地址【国内需使用代理或翻墙才可打开】.url.url
-
少女们的冒险记事1-2.61/【少女们的冒险记事】【更新“第二部”至61章】作者:流影(wtsdm84318).txt