Static task
static1
Behavioral task
behavioral1
Sample
orochi_z_tc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
orochi_z_tc.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
精彩库游戏@jcku.com.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
精彩库游戏@jcku.com.url
Resource
win10v2004-20221111-en
General
-
Target
a414cc326daca6def7eaada6cdb8c71be4823b7fba11025d6c81b79bfe65b261
-
Size
1.2MB
-
MD5
110ff0c33e4a49af38f4e1234e6fb692
-
SHA1
4dbd89b075124547d4fc29f721c06305fabc4243
-
SHA256
a414cc326daca6def7eaada6cdb8c71be4823b7fba11025d6c81b79bfe65b261
-
SHA512
5dcad3e4dfc0d5002692a8b8e0d89eaacc0c36410313051159a3bbf4cb9377603b00daf103e949acabda1ee4e0327542e335ddde8a6d94e964b39ead61da4251
-
SSDEEP
24576:J5B+u1WL46Y+KGhkTqLADXOVmTdyEo1vvgbFADfL:JauA7Y+46yOVkoGxADD
Malware Config
Signatures
Files
-
a414cc326daca6def7eaada6cdb8c71be4823b7fba11025d6c81b79bfe65b261.rar
-
orochi_z_tc.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.BTPIG0 Size: - Virtual size: 16.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BTPIG1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BTPIG2 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
使用说明.txt
-
精彩库游戏@jcku.com.url.url