Static task
static1
Behavioral task
behavioral1
Sample
aqcslxfz_53810/奥奇传说lx辅助 v5.51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aqcslxfz_53810/奥奇传说lx辅助 v5.51.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
aqcslxfz_53810/安装前必看 -.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
aqcslxfz_53810/安装前必看 -.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
aqcslxfz_53810/最牛的单机游戏下载网站.url
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
aqcslxfz_53810/最牛的单机游戏下载网站.url
Resource
win10v2004-20220812-en
General
-
Target
d9e1011812075db493438e1d27ff76b7adef64d8e95dc16871b4a9364d1b8cfc
-
Size
1.4MB
-
MD5
78b2d35b13e05ae24c6a8c0ba6a813cd
-
SHA1
f47dd1f575946d2b9ffe43f034169d9e263d58cc
-
SHA256
d9e1011812075db493438e1d27ff76b7adef64d8e95dc16871b4a9364d1b8cfc
-
SHA512
532ecfe8cad8f39f59a0e057816a80e168eac730c8fba5f2aaa0dd10307268dfd0edfd74e9f78741fa7fd48f812a4229048431845f1c9edabf6ddc02183f9037
-
SSDEEP
24576:yo47NwAjxHcg2XMCakmsH4bevG7bh1FTVM8LRCq7rPmLSctucouGQnYj7O:yo4x9N8QNgiBM8LRUBoZQyK
Malware Config
Signatures
Files
-
d9e1011812075db493438e1d27ff76b7adef64d8e95dc16871b4a9364d1b8cfc.rar
-
aqcslxfz_53810/奥奇传说lx辅助 v5.51.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 700KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wflisyze Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffczjybw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
aqcslxfz_53810/安装前必看 -.url.url
-
aqcslxfz_53810/安装前必看.txt
-
aqcslxfz_53810/最牛的单机游戏下载网站.url.url