Static task
static1
Behavioral task
behavioral1
Sample
Windows 10 数字永久激活工具 v1.4.6 汉化版(64位).exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Windows 10 数字永久激活工具 v1.4.6 汉化版(64位).exe
Resource
win10v2004-20220901-en
General
-
Target
9efe3587fa36f7f990a6960dda289f035b86e920d083a36a36ce9299c6fbdf86
-
Size
5.0MB
-
MD5
a0a75806d3b6856b06dcff54aa5bb7a2
-
SHA1
36de839e7f97723594270c243650cfd7eaa5a6ec
-
SHA256
9efe3587fa36f7f990a6960dda289f035b86e920d083a36a36ce9299c6fbdf86
-
SHA512
2ca91a2b548457907f7b4733b6a33e5b017fbaf5ddcd6ba5c5f8e37a21e74c7475cff8b3f465570fd420401b6cf68477994fcf70c6a068e69d582c2721977031
-
SSDEEP
98304:52M7/eZnw8VpeD7QQ8jSN7/eZnw8VpeD7QQ8jSL7/eZnw8VpeD7QQ8jS0BvdF:5228TeD7QQIv28TeD7QQI928TeD7QQIf
Malware Config
Signatures
Files
-
9efe3587fa36f7f990a6960dda289f035b86e920d083a36a36ce9299c6fbdf86.zip
-
Windows 10 数字永久激活工具 v1.4.6 汉化版(64位).exe.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.code Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 393KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ