Static task
static1
Behavioral task
behavioral1
Sample
ðյ½1.2ʽ.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ðյ½1.2ʽ.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ȥϷ쿴/win7ϵͳ/1.png
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
ȥϷ쿴/win7ϵͳ/1.png
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ȥϷ쿴/win8õ½Խ̳.docx
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ȥϷ쿴/win8õ½Խ̳.docx
Resource
win10v2004-20220901-en
General
-
Target
264edef2618f865ec31b8e9e795e04ebf6f3a58f11549f8c80a8e537423436da
-
Size
3.6MB
-
MD5
27d9d07aa7d50770ef97d2feb4f6d517
-
SHA1
dc4341ecd8edde4882c052cbb34ea38bae276c53
-
SHA256
264edef2618f865ec31b8e9e795e04ebf6f3a58f11549f8c80a8e537423436da
-
SHA512
082b65477206dac693c148b460150904457ad1a8c9e9d76de573627e94e321203325b2569a2eaf896ef57777c8464929fbfc47d593d213988c097f4e70605be2
-
SSDEEP
98304:acRPB0WFflbJcaItOXsYg/1A3cRwJ55SNI:dRPfyaIQXsYg/jS
Malware Config
Signatures
Files
-
264edef2618f865ec31b8e9e795e04ebf6f3a58f11549f8c80a8e537423436da.zip
-
HShield/hsupdate.jpg.jpg
-
HShield/splash.jpg.jpg
-
Ϸ˵.txt
-
ðյ½1.2ʽ.exe.exe windows x86
257ead9846a792ca5868e9c0d83c7713
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
user32
MessageBoxA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 240KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ȥϷ쿴/XP/1.jpg.jpg
-
ȥϷ쿴/XP/10.jpg.jpg
-
ȥϷ쿴/XP/2.jpg.jpg
-
ȥϷ쿴/XP/3.jpg.jpg
-
ȥϷ쿴/XP/4.jpg.jpg
-
ȥϷ쿴/XP/5.jpg.jpg
-
ȥϷ쿴/XP/6.jpg.jpg
-
ȥϷ쿴/XP/7.jpg.jpg
-
ȥϷ쿴/XP/8.jpg.jpg
-
ȥϷ쿴/XP/9.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/1.jpg.png
-
ȥϷ쿴/win7ϵͳ/10.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/2.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/3.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/4.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/5.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/6.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/7.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/8.jpg.jpg
-
ȥϷ쿴/win7ϵͳ/9.jpg.jpg
-
ȥϷ쿴/win8õ½Խ̳.docx.docx office2007