Static task
static1
Behavioral task
behavioral1
Sample
网站文件升级.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
网站文件升级.exe
Resource
win10v2004-20220812-en
General
-
Target
946fd1738b1ab4bbc3bf37167d5490a1fbd69b4e07cb98d477948e9024a2e482
-
Size
564KB
-
MD5
4c628ef8459df5375a83601417eccaba
-
SHA1
8001e20a4daf7fd66947361bb9c1386d3b6145e1
-
SHA256
946fd1738b1ab4bbc3bf37167d5490a1fbd69b4e07cb98d477948e9024a2e482
-
SHA512
9a9c793cb1a4ba8c78f6f53330b509820f19ae29ca924ae0cfdc3433ad5d1ee5f7cf2603c3b2e960e70cabdab94e7b5d725b7ad8eb3998212af2382f8835d200
-
SSDEEP
12288:QVuvyjnEbPKfeoB7DuVcYj/6Ig3YWYt+URrQ3X1aZlbVCp:Q86ozonFDuVcYj7jGs2ilbMp
Malware Config
Signatures
Files
-
946fd1738b1ab4bbc3bf37167d5490a1fbd69b4e07cb98d477948e9024a2e482.rar
-
网站文件升级.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 173KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE