Static task
static1
Behavioral task
behavioral1
Sample
txtencry/)!访问我们的网站!.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
txtencry/)!访问我们的网站!.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
txtencry/TXT文本加密精灵.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
txtencry/TXT文本加密精灵.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
txtencry/说明.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
txtencry/说明.url
Resource
win10v2004-20221111-en
General
-
Target
3bd4b5154b55d3ea9f607aa29ccbb0ca9f7ce19aff8943d0ba2f2c43e3f89069
-
Size
313KB
-
MD5
aa2c34b726e539461c7db1e29a178364
-
SHA1
2a8ed7ce4e8b30d5fc96adcdfef5c5dc8f15c980
-
SHA256
3bd4b5154b55d3ea9f607aa29ccbb0ca9f7ce19aff8943d0ba2f2c43e3f89069
-
SHA512
3407d7fe115acd5d3e0f55550fb690279f76aa44bc93837c62383873b99b0f52ec94a2df9abdcca763a919388b455c7c8c7d17e52e0328b9323bd942f5bc4fc6
-
SSDEEP
6144:5dRAGt2SdZHcBvgyqoOPr5InCvFcCPGZfNJHmRdcA2yPbw6AoMz7Gk7ug8oe/bmA:5dRtjCCtSLHmRLbw6AoS3N0SiPFr
Malware Config
Signatures
Files
-
3bd4b5154b55d3ea9f607aa29ccbb0ca9f7ce19aff8943d0ba2f2c43e3f89069.rar
-
txtencry/!)设JZ5U为首页!.reg
-
txtencry/)!访问我们的网站!.url.url
-
txtencry/TXT文本加密精灵.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
BY:��' Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BY:��' Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BY:��' Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
txtencry/使用说明.txt
-
txtencry/说明.url.url