Overview
overview
4Static
static
程設A_11...�.docx
windows7-x64
4程設A_11...�.docx
windows10-2004-x64
1程設A_11...m1.vbs
windows7-x64
1程設A_11...m1.vbs
windows10-2004-x64
1程設A_11...er.vbs
windows7-x64
1程設A_11...er.vbs
windows10-2004-x64
1程設A_11...es.vbs
windows7-x64
1程設A_11...es.vbs
windows10-2004-x64
1程設A_11...p1.exe
windows7-x64
1程設A_11...p1.exe
windows10-2004-x64
1程設A_11...p1.exe
windows7-x64
1程設A_11...p1.exe
windows10-2004-x64
1程設A_11...m1.vbs
windows7-x64
1程設A_11...m1.vbs
windows10-2004-x64
1程設A_11...er.vbs
windows7-x64
1程設A_11...er.vbs
windows10-2004-x64
1程設A_11...es.vbs
windows7-x64
1程設A_11...es.vbs
windows10-2004-x64
1程設A_11...p2.exe
windows7-x64
1程設A_11...p2.exe
windows10-2004-x64
1程設A_11...p2.exe
windows7-x64
1程設A_11...p2.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
程設A_11133107_余庭嫻/書面Word檔/程設A_11133107_余庭嫻.docx
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
程設A_11133107_余庭嫻/書面Word檔/程設A_11133107_余庭嫻.docx
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Form1.vbs
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Form1.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.Designer.vbs
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.Designer.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.vbs
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.exe
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Form1.vbs
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Form1.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Resources.Designer.vbs
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Resources.Designer.vbs
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Resources.vbs
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Resources.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe
Resource
win10v2004-20220812-en
General
-
Target
22552bdbae6b8bba1bd7da16a0360b5d734346fec9185bc2e92a7465bc35cfa5
-
Size
2.8MB
-
MD5
c7ed10ccadb23758d905441a7c517d11
-
SHA1
6486117615482f16c234b1d0de459981ea52a219
-
SHA256
22552bdbae6b8bba1bd7da16a0360b5d734346fec9185bc2e92a7465bc35cfa5
-
SHA512
67380fe48fe5234dc48fda1daba9d0c22b24af38a0149ba6ea3648a59a416b19d4d23ce6c81f489803143f7840392a50dfeb7379917ddcd5a89d39cfb4150fb1
-
SSDEEP
49152:71DOgof9vULN4sUTzkVSOvG6C92mFJmy8SpxYqnkb4p0XipPxYk60A66lCZh:ZRoFvmN0sSOvJCgmf7NpxfnkbjXSP76W
Malware Config
Signatures
Files
-
22552bdbae6b8bba1bd7da16a0360b5d734346fec9185bc2e92a7465bc35cfa5.zip
-
程設A_11133107_余庭嫻/書面Word檔/程設A_11133107_余庭嫻.docx.docx office2007
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/.vs/WindowsFormsApp1/v17/.suo
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1.sln
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/App.config
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Form1.Designer.cs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Form1.cs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Form1.resx.vbs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Program.cs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/AssemblyInfo.cs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.Designer.cs.vbs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Resources.resx.vbs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Settings.Designer.cs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/Properties/Settings.settings
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/WindowsFormsApp1.csproj
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.exe.config
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/bin/Debug/WindowsFormsApp1.pdb
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.Form1.resources
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.Properties.Resources.resources
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.AssemblyReference.cache
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.CoreCompileInputs.cache
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.FileListAbsolute.txt
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.csproj.GenerateResource.cache
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
程設A_11133107_余庭嫻/程式檔/找零程式/WindowsFormsApp1/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.pdb
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/.vs/WindowsFormsApp2/FileContentIndex/f67f1f14-2621-4a6c-9caf-469e141e2943.vsidx
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/.vs/WindowsFormsApp2/v17/.suo
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2.sln
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/App.config
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Form1.Designer.cs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Form1.cs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Form1.resx.vbs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Program.cs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/AssemblyInfo.cs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Resources.Designer.cs.vbs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Resources.resx.vbs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Settings.Designer.cs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/Properties/Settings.settings
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/WindowsFormsApp2.csproj
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.exe.config
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/bin/Debug/WindowsFormsApp2.pdb
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Form1.resources
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.Properties.Resources.resources
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.AssemblyReference.cache
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.CoreCompileInputs.cache
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.FileListAbsolute.txt
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.csproj.GenerateResource.cache
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
程設A_11133107_余庭嫻/程式檔/電費計算/WindowsFormsApp2/WindowsFormsApp2/obj/Debug/WindowsFormsApp2.pdb