Static task
static1
Behavioral task
behavioral1
Sample
xmsz_v1.0/chi_words.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
xmsz_v1.0/chi_words.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
xmsz_v1.0/使用说明.docx
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
xmsz_v1.0/使用说明.docx
Resource
win10v2004-20220812-en
General
-
Target
2643c1b8c07108edc8f784540144dd5022a62b376ffb7ccd6d170995db835d77
-
Size
1.6MB
-
MD5
edb181e593bfdc4d6c826045a519fe4b
-
SHA1
2c6b8ce07a0217b430f0eba036d11527b8f1647b
-
SHA256
2643c1b8c07108edc8f784540144dd5022a62b376ffb7ccd6d170995db835d77
-
SHA512
e93b56092ef1ec8d2ea95fdee66246a629bc04d3193b2ed8c2a755e68e46684ab1a44fcbf427d3808abcc39d66ba84207d4ea42b2d0e1c7251ce3732d1e94c0c
-
SSDEEP
24576:5cjjGGk+gVmM4KlCFu5HG0mIcmmt1taQS2pDRynvbW7B9OD/u/lcO0vUrWeCFrMY:y2GzgDVz5m0EVSKknvUaqaOhaeCFgBa
Malware Config
Signatures
Files
-
2643c1b8c07108edc8f784540144dd5022a62b376ffb7ccd6d170995db835d77.zip
-
xmsz_v1.0/chi_words.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
xmsz_v1.0/words
-
xmsz_v1.0/使用说明.docx.docx office2007