Behavioral task
behavioral1
Sample
去脚本之家看看.url
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
去脚本之家看看.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
慧达快递单号生成器 V8.2.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
慧达快递单号生成器 V8.2.0.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
服务器软件.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
服务器软件.url
Resource
win10v2004-20221111-en
General
-
Target
30081343409bbf08dc9c7b496c90b48c39d8c2f70d84a6cf3d4a581fdc2b3601
-
Size
970KB
-
MD5
c6bc8445c57e5efb52fdc9d9d4b9bb62
-
SHA1
3bf6964ace0c80125d3d56e72660bf9245ecfd08
-
SHA256
30081343409bbf08dc9c7b496c90b48c39d8c2f70d84a6cf3d4a581fdc2b3601
-
SHA512
b3552e821796ca15966c60815f4dbad1b48a90c6d7253be52a107fafab4936f65b6082ede8290e84a65c0a19f814d575312671350864aece459d383159eacb21
-
SSDEEP
24576:c/IzmuMoqXzM0tjNctLsFYw9IYJ5S+nwdpq:eIyuxezl1NctnGIYJ8+wbq
Malware Config
Signatures
-
resource yara_rule static1/unpack001/慧达快递单号生成器 V8.2.0.exe upx
Files
-
30081343409bbf08dc9c7b496c90b48c39d8c2f70d84a6cf3d4a581fdc2b3601.rar
-
jb51.net.txt
-
去脚本之家看看.url.url
-
慧达快递单号生成器 V8.2.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 977KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 736KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 988KB - Virtual size: 986KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
服务器软件.url.url