Static task
static1
Behavioral task
behavioral1
Sample
QQT5.1火影辅助I.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
QQT5.1火影辅助I.exe
Resource
win10v2004-20221111-en
General
-
Target
710a4307d82a0f7e3375e8c74683041f68ee5b7e01813452692bd0f36d1944f4
-
Size
1.6MB
-
MD5
5ba09706eca3bbc0d7de577c6dea806d
-
SHA1
01245446577ef814db22def160c98a9a63403c96
-
SHA256
710a4307d82a0f7e3375e8c74683041f68ee5b7e01813452692bd0f36d1944f4
-
SHA512
cb0b609a567f8b2d458ec2af2501865a01d48f764c51fa2f7fb623f2883570cb9b3987372acb3ea31a7dd74a82f97b097ab3f6c72dc61593cbb62ea0d039fe85
-
SSDEEP
49152:aX92pwYNh9eHFQclW2h4O1k3uCWLF8gsE2E7BRqHIhlo:Y9gwehoHbjNs9eQHZ
Malware Config
Signatures
Files
-
710a4307d82a0f7e3375e8c74683041f68ee5b7e01813452692bd0f36d1944f4.rar
-
QQT5.1火影辅助I.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
kdb0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kdb1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kdb Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE