Static task
static1
Behavioral task
behavioral1
Sample
QQռv2.1.6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
QQռv2.1.6.exe
Resource
win10v2004-20220812-en
General
-
Target
10d54d7c5715871998463de2d6d3ad3c71825bca9195109be6ec87cce69264e9
-
Size
1.7MB
-
MD5
72354f965cc13074e886fbae0c117a16
-
SHA1
80b1759f4e62fc929a2b6eadf310c18bf2978163
-
SHA256
10d54d7c5715871998463de2d6d3ad3c71825bca9195109be6ec87cce69264e9
-
SHA512
852961eff119c6d6eb8cd555ecb6fa1d3ec9ba27fa2789aabc9a7519cc08eb92229e426ddb3dead5368dfc41c6f8afe7a0ba3b08fdeb0e7be1d73e9f50c2ce62
-
SSDEEP
49152:WNdPkJ5h9VaUKAD1+IjO+x03CPpY7LmsCWXGXWIZx2Yen/zaxd:idPkrTVaUTDbpa3vzpGGvYen2xd
Malware Config
Signatures
Files
-
10d54d7c5715871998463de2d6d3ad3c71825bca9195109be6ec87cce69264e9.zip
-
QQռv2.1.6.exe.exe windows x86
8b698261d6dbfd7c31828bbb6b84412b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
WSACleanup
rasapi32
RasGetConnectStatusA
kernel32
GetTimeZoneInformation
user32
CreateIconFromResource
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SysAllocStringByteLen
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 792KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
˵.htm.html .js