Static task
static1
Behavioral task
behavioral1
Sample
稀饭辅助_去广告11-7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
稀饭辅助_去广告11-7.exe
Resource
win10v2004-20220812-en
General
-
Target
83c57af3c89d8fc5d6e1efbe5f7ef59dd64edcb9e59d9e2803874b43b60bc271
-
Size
2.3MB
-
MD5
46d48f64e76623e140ca5b5f06edbaac
-
SHA1
e5b6bb2d88e7caa920979d07c27b30b11024a08f
-
SHA256
83c57af3c89d8fc5d6e1efbe5f7ef59dd64edcb9e59d9e2803874b43b60bc271
-
SHA512
9262ef0b8b7cf22d3eefec8767f3b8a98371150c83baff0bf708038d7719d52872d50c9652269316c691525a7fc7574e2e191194e357a6abdd25644b7479b54a
-
SSDEEP
49152:64LK8xnMPQCqPtvxy5vNkjXnl0ApCzPsyIuOVxBIe6tWxq0LA39ZXIqHb8:64LKoMPQCytc5F+eApCzPshuOVLRwOAi
Malware Config
Signatures
Files
-
83c57af3c89d8fc5d6e1efbe5f7ef59dd64edcb9e59d9e2803874b43b60bc271.rar
-
稀饭辅助_去广告11-7.exe.exe windows x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 296KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.0MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.psgl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE