Static task
static1
Behavioral task
behavioral1
Sample
klqqzlcxgj_veryhuo.com/卡里QQ资料查询1.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
klqqzlcxgj_veryhuo.com/卡里QQ资料查询1.0.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
klqqzlcxgj_veryhuo.com/最火软件站.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
klqqzlcxgj_veryhuo.com/最火软件站.url
Resource
win10v2004-20220812-en
General
-
Target
a418f990034bc332c9690cc3f8a7dfe1a7454ad25658af76995778644a30800d
-
Size
2.0MB
-
MD5
541fc8a071d7c8a428f96a08892dcf35
-
SHA1
4fb10e51afdadb351fb6dd6ba2609bf2ca7789dc
-
SHA256
a418f990034bc332c9690cc3f8a7dfe1a7454ad25658af76995778644a30800d
-
SHA512
8892b7036b1dda0d55fcca56ec603599877a2b322937c487f6d2391dfebaf803fa625b8322881e047cf6705ee7a2d71872252fc323564a6efcf9d4fdad84942f
-
SSDEEP
49152:FCuzGZjIEbTdi2ekzxNzsdcLb8ifvRweT9i8w/EzEg5E/lEvdFk2MJeZ3:YuzGnbT1/7pLbhfvBJi8wUL5EtOFdM0R
Malware Config
Signatures
Files
-
a418f990034bc332c9690cc3f8a7dfe1a7454ad25658af76995778644a30800d.rar
-
klqqzlcxgj_veryhuo.com/卡里QQ资料查询1.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Esp0 Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Esp1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Esp Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
klqqzlcxgj_veryhuo.com/最火软件站.url.url
-
klqqzlcxgj_veryhuo.com/说明文档.txt