Static task
static1
Behavioral task
behavioral1
Sample
XLTQGJQFRJ_veryhuo.com/最火软件站.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
XLTQGJQFRJ_veryhuo.com/最火软件站.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
XLTQGJQFRJ_veryhuo.com/清影软件-新浪微博数据提取 1.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
XLTQGJQFRJ_veryhuo.com/清影软件-新浪微博数据提取 1.0.exe
Resource
win10v2004-20221111-en
General
-
Target
922e9d5b058c9f239b4b4abf5d27285e077cc985601c60b250ce821b550c29d1
-
Size
464KB
-
MD5
223fa69c8a80f364f78a2e0d42932c4c
-
SHA1
d9c5c9444f94e97d9a1210305acb9b182ea3b24a
-
SHA256
922e9d5b058c9f239b4b4abf5d27285e077cc985601c60b250ce821b550c29d1
-
SHA512
143e13a19250e989aebf017f341d6fd43d340c0f8460c912a36d73b599def94b1d71860b70a124fd8bc9d35256aa058104cff989b3c0c0c0a923c1552428b049
-
SSDEEP
12288:nWhACvwKVsn6I8NNKQ3QJtX6m7wVyRKmLNXDEdWOGCq:nWKCvwKe6LNNMXN0ODLqq
Malware Config
Signatures
Files
-
922e9d5b058c9f239b4b4abf5d27285e077cc985601c60b250ce821b550c29d1.rar
-
XLTQGJQFRJ_veryhuo.com/sinawb.ini
-
XLTQGJQFRJ_veryhuo.com/最火软件站.url.url
-
XLTQGJQFRJ_veryhuo.com/清影软件-新浪微博数据提取 1.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 945KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 466KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 677B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
XLTQGJQFRJ_veryhuo.com/软件说明.txt