Behavioral task
behavioral1
Sample
Google翻译修复工具_1.2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Google翻译修复工具_1.2.exe
Resource
win10v2004-20220812-en
General
-
Target
ecf912e09eabbd57906d8bb998c0f7994cdd777fb2538a94d13a813a38a96b16
-
Size
734KB
-
MD5
919ccc5a5b249f88172a612f5e9b7f49
-
SHA1
2fe05d7b8d9149599453d78916765a3db68dad55
-
SHA256
ecf912e09eabbd57906d8bb998c0f7994cdd777fb2538a94d13a813a38a96b16
-
SHA512
e70f4e4fc1709f3e560d4ef097591d60a691e5c427b4f05792eea27300682dca90f77d3e8bde257c4d03d9460414748c2c5c38a7f2bf6ed72c32c72e66d66af9
-
SSDEEP
12288:vrEmTn8Q5en5eTCHfyUb57dWnlz7hzjZ/oy/yU32VWquzcgog8du3PnOGAZg:YmT8W85tHqSAlpZf/yU32kquzcgEddGF
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Google翻译修复工具_1.2.exe upx
Files
-
ecf912e09eabbd57906d8bb998c0f7994cdd777fb2538a94d13a813a38a96b16.zip
-
Google翻译修复工具_1.2.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1024KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 559KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 844KB - Virtual size: 843KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
免责声明.txt
-
更多资源——点击这里.png
-
更新日志.txt