Behavioral task
behavioral1
Sample
Flood 注册机.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Flood 注册机.exe
Resource
win10v2004-20220901-en
General
-
Target
a02575237653606678a96d6f04e5ffe161bd0c8c173dbff9788ff868f07d35fc
-
Size
357KB
-
MD5
ce97d682c774df8539d0c2c1091bedc8
-
SHA1
83acc30aa285d15b84120876d60262102293c5d3
-
SHA256
a02575237653606678a96d6f04e5ffe161bd0c8c173dbff9788ff868f07d35fc
-
SHA512
a7841aa716898e80622d3300c784ee3879805ac3cf85359b7fc7bd6d7c7ef425957409606849324e14075d8a559bd9134db4c0f6ea2a9efacc6c3471def91c36
-
SSDEEP
6144:XJPy1NfCc+xt0+YERHzsziJZerEPLwha7IUS1SdGKM7pL/wFMgZOmZX3zxDeYF:qNutdVmhrEPoasUS1SdGKIUvIUj9eYF
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Flood 注册机.exe aspack_v212_v242
Files
-
a02575237653606678a96d6f04e5ffe161bd0c8c173dbff9788ff868f07d35fc.rar
-
Flood 注册机.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 251KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE