Static task
static1
Behavioral task
behavioral1
Sample
zxarps/zxarps免杀版/cmd.bat
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
zxarps/zxarps免杀版/cmd.bat
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
zxarps/zxarps免杀版/zxarps.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
zxarps/zxarps免杀版/zxarps.exe
Resource
win10v2004-20220812-en
General
-
Target
0856e356a20b21b34215e0ba65dce689294c670c72a04f6d20703b9b537103f5
-
Size
98KB
-
MD5
dff269824538ef5d4aa1cc23350bd5c3
-
SHA1
c7b2b121aaa20218a1aa37139c7074c26123648c
-
SHA256
0856e356a20b21b34215e0ba65dce689294c670c72a04f6d20703b9b537103f5
-
SHA512
b9f9130fec73bfd90ff09a0d3a3ea91426ef4bdb6efee3907a77c4ea0219cd25ba7652b36b03cc3f62b1ea0321e4ec9f11ba133d6b7c39c749903c0ba8bbdb2a
-
SSDEEP
3072:yOpcQz+s5ZfDVcthhHvsyLN/Cnvub80BHOqF:r6SHfDSjNvsyZUv0fHzF
Malware Config
Signatures
Files
-
0856e356a20b21b34215e0ba65dce689294c670c72a04f6d20703b9b537103f5.rar
-
zxarps/zxarps免杀版/cmd.bat
-
zxarps/zxarps免杀版/zxarps.exe.exe windows x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
.text Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE