Static task
static1
Behavioral task
behavioral1
Sample
巅峰Q神V7.9/巅峰Q神V7.9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
巅峰Q神V7.9/巅峰Q神V7.9.exe
Resource
win10v2004-20220812-en
General
-
Target
5a0082f099abb456b9fb1d201df865d8ebc65893be10efda5b747aa8087feac0
-
Size
1.9MB
-
MD5
492d50d545f45de280886e4d05cc980e
-
SHA1
38c2664e308bc7d2fd4411b8e35d96b194fee8cf
-
SHA256
5a0082f099abb456b9fb1d201df865d8ebc65893be10efda5b747aa8087feac0
-
SHA512
79c1978ecdec0c013cfa8d178f95f8072096c9becb53914da1fc7f474f0c2edf07933577f6d609ad1684060c73e95d5335ceb203ee0707e5f53cede82248f327
-
SSDEEP
49152:fXLtJPbHfxtMHKJsIVJl4Ap3mxJicOT4zrDOBYx:jFKH89V4xPX++x
Malware Config
Signatures
Files
-
5a0082f099abb456b9fb1d201df865d8ebc65893be10efda5b747aa8087feac0.zip
-
下载说明.htm.html .js
-
巅峰Q神V7.9/巅峰Q神V7.9.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 700KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
micwfrtj Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idjmtjpw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE