Static task
static1
Behavioral task
behavioral1
Sample
磁力资源搜索助手v22.09.23特别版/BTSOU.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
磁力资源搜索助手v22.09.23特别版/BTSOU.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
磁力资源搜索助手v22.09.23特别版/Interop.ThunderAgentLib.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
磁力资源搜索助手v22.09.23特别版/Interop.ThunderAgentLib.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
磁力资源搜索助手v22.09.23特别版/MySql.Data.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
磁力资源搜索助手v22.09.23特别版/MySql.Data.dll
Resource
win10v2004-20220812-en
General
-
Target
b9cb4468a4c837862d91882b7d287ba879a212a6ac105e7c7eba3f087c7e6562
-
Size
778KB
-
MD5
93257b0ff77d240c1a213714825dfff7
-
SHA1
5d4e93ce8034decbd1f5642af8256e50d574f84d
-
SHA256
b9cb4468a4c837862d91882b7d287ba879a212a6ac105e7c7eba3f087c7e6562
-
SHA512
c52c5f32516fc53950713115b85dd41f65cc899d6848b57c99eea8a270b4c3e39ae961af8d42e15947669597b2bb470a3ca5b460548e34940b64b4932f31702f
-
SSDEEP
12288:r7TF/WoCfumc2nWTng4CuuVENevJ7e+8PeLR28eOj2vq3:rX8WTSuuVoeR7S4Qa
Malware Config
Signatures
Files
-
b9cb4468a4c837862d91882b7d287ba879a212a6ac105e7c7eba3f087c7e6562.rar
-
磁力资源搜索助手v22.09.23特别版/BTSOU.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 695KB - Virtual size: 695KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
磁力资源搜索助手v22.09.23特别版/Interop.ThunderAgentLib.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
磁力资源搜索助手v22.09.23特别版/MySql.Data.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
磁力资源搜索助手v22.09.23特别版/data.ryx
-
磁力资源搜索助手v22.09.23特别版/使用说明.jpg.jpg
-
磁力资源搜索助手v22.09.23特别版/常见问题.txt
-
磁力资源搜索助手v22.09.23特别版/更新说明.txt