Static task
static1
Behavioral task
behavioral1
Sample
车辆数据修改工具.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
车辆数据修改工具.exe
Resource
win10v2004-20220812-en
General
-
Target
07932c2cb01b0d9568709844c991e016ea7e68a0612bfedcb7e0d9e6ae870e94
-
Size
30KB
-
MD5
7e9a707bec9dfbad26709c4717d408c7
-
SHA1
7f78c2b6a3cce22dc6ae5e6ce01ee25add30b008
-
SHA256
07932c2cb01b0d9568709844c991e016ea7e68a0612bfedcb7e0d9e6ae870e94
-
SHA512
9c70920c3a1c0b4ac710cfae34bc1c4521fe92e6cfb05f1f0004fac53440bcf7fb9deda18730b54acd8cc0049931d223497d567d8249b4c5a63aadf7004c9c60
-
SSDEEP
768:MHMOJFEjuu0rxMUbc+25E1nNl5sQO4xFLWic/OD6s:MFEuxMo25yNTPLW/OD6s
Malware Config
Signatures
Files
-
07932c2cb01b0d9568709844c991e016ea7e68a0612bfedcb7e0d9e6ae870e94.rar
-
车辆数据修改工具.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE