Behavioral task
behavioral1
Sample
西西猴子网.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
西西猴子网.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
跑跑游侠多功能17.1v0709.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
跑跑游侠多功能17.1v0709.exe
Resource
win10v2004-20221111-en
General
-
Target
30a05e4fd800220d87d9a821870d4130fc99d579d5a5673157a8275d69f2a06b
-
Size
328KB
-
MD5
b34edced254e4f11cb8ae716c1c6b6b6
-
SHA1
66c579ea145375808b82f5a63eb8117376844a7a
-
SHA256
30a05e4fd800220d87d9a821870d4130fc99d579d5a5673157a8275d69f2a06b
-
SHA512
6ba3c2a1176766153c5eb284edc8abcc3376d897f52725b9c285bedc03ef787583c05e73cb405d553664b1b225a9e4e28136c40fb1930d47758ea4d0126553b8
-
SSDEEP
6144:HrKnpFcd0bVg0NqO3ldHprq0RGnsW2iAG5dA/u8Y3AxW0zWSg24lUsVu/7p5GZ0x:Hrzd0maBpdwlE/CAnWSg2yUF5GvTQXd
Malware Config
Signatures
-
resource yara_rule static1/unpack001/跑跑游侠多功能17.1v0709.exe upx
Files
-
30a05e4fd800220d87d9a821870d4130fc99d579d5a5673157a8275d69f2a06b.zip
-
自动刷公里数使用说明.txt
-
西西猴子网.txt
-
西西猴子网.url.url
-
跑跑游侠多功能17.1v0709.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 772KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
跑跑游侠多功能说明.txt