Behavioral task
behavioral1
Sample
千寻QQ社-空间赞说说软件.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
千寻QQ社-空间赞说说软件.exe
Resource
win10v2004-20221111-en
General
-
Target
105912a8a06ead130485f7950872bdff37ff810f49b93fb9ad8e0fef21baa23c
-
Size
368KB
-
MD5
e91f697a3b38710f5567152ec2ebf96f
-
SHA1
c124755aaa00cdef58ab9b6cf5398a7ef4817eea
-
SHA256
105912a8a06ead130485f7950872bdff37ff810f49b93fb9ad8e0fef21baa23c
-
SHA512
6e42e719f3f3946a8faea7284e22fb0ce60367c2ceadb6464c78ef4bc93c5db3ce24d8aac6da8fb7ae429d8cb9dca61844ec4762131950a749631cdeabc93598
-
SSDEEP
6144:YkDIKIwrw1wmGl90CZluV/EEVG+HG+HCdiKAbgJnW7YBEB2Knr7P1hyW:Yk8zmmGlJZEV7hHLidiK5heIKr18W
Malware Config
Signatures
-
resource yara_rule static1/unpack001/千寻QQ社-空间赞说说软件.exe upx
Files
-
105912a8a06ead130485f7950872bdff37ff810f49b93fb9ad8e0fef21baa23c.zip
-
下载说明.htm.html .js
-
千寻QQ社-空间赞说说软件.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 556KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE