Behavioral task
behavioral1
Sample
Kaspersky key 加载工具.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Kaspersky key 加载工具.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Kaspersky key 备份工具.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Kaspersky key 备份工具.exe
Resource
win10v2004-20220812-en
General
-
Target
1c104a1334e616a0ce6093ddeb01eeda6610185378f7389c24204e675f102f4c
-
Size
127KB
-
MD5
14f9e9ffc8fb9fa97b2e95c855cdc428
-
SHA1
7f126eab52fa2d3c845cac1329de3c6c2d62c877
-
SHA256
1c104a1334e616a0ce6093ddeb01eeda6610185378f7389c24204e675f102f4c
-
SHA512
39e93696d868a12c90886bb4839ce35227b030df1a46c7fb4fe14908e52d95fb4f8cf4a1ad579249bba06d100effdc663fbae4706670ea6f0fe75a2180f6efda
-
SSDEEP
3072:4j+yTHnMO/ABJjivpOb8VR+yTHnyitv4UM8tk8gy:v8s37iMb8Vg8HD5VY8gy
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Kaspersky key 加载工具.exe upx static1/unpack001/Kaspersky key 备份工具.exe upx
Files
-
1c104a1334e616a0ce6093ddeb01eeda6610185378f7389c24204e675f102f4c.rar
-
Kaspersky key 加载工具.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Kaspersky key 备份工具.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
使用方法.txt