Static task
static1
Behavioral task
behavioral1
Sample
xzdgnslygj_veryhuo.com/小哲多功能Qzone刷留言工具1.5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
xzdgnslygj_veryhuo.com/小哲多功能Qzone刷留言工具1.5.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
xzdgnslygj_veryhuo.com/最火软件站.url
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
xzdgnslygj_veryhuo.com/最火软件站.url
Resource
win10v2004-20220901-en
General
-
Target
6b311b3b51597e7ae208552add1837816e0c1ad4deaedcdb9f47ca3e181991d1
-
Size
1.3MB
-
MD5
fc11ca2ef7e4788407aa13835a695ddb
-
SHA1
15cec0c60a31d567b4d608633b9a4dd6e75471bf
-
SHA256
6b311b3b51597e7ae208552add1837816e0c1ad4deaedcdb9f47ca3e181991d1
-
SHA512
46b99758e89df632f7cd7ec9ecb98499f4e81c76e417128753871603e85301de41a50d26ab6777beb9dba9345ee2d0d0ce76ad706e14fb7a336a22e0035b3576
-
SSDEEP
24576:MlNxkdr0c7NIqpNyq2xQ33OX6O985zHvwdGaAihp73ZIeL9+zglIBW2r4kr:SoAuLr2xQAK5YdGaB7JIeLk8F2r4G
Malware Config
Signatures
Files
-
6b311b3b51597e7ae208552add1837816e0c1ad4deaedcdb9f47ca3e181991d1.rar
-
xzdgnslygj_veryhuo.com/小哲多功能Qzone刷留言工具1.5.exe.exe windows x86
ad4496c2b043b46a0f1e72938ff0c6d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
IsIconic
gdi32
ExtTextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_GetIcon
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 496KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
xzdgnslygj_veryhuo.com/最火软件站.url.url
-
xzdgnslygj_veryhuo.com/留言珍藏/关于兄弟感情的留言.txt
-
xzdgnslygj_veryhuo.com/留言珍藏/关于爱情的留言.txt
-
xzdgnslygj_veryhuo.com/留言珍藏/关于青春的经典留言.txt
-
xzdgnslygj_veryhuo.com/留言珍藏/给好朋友留言的句子.txt
-
xzdgnslygj_veryhuo.com/留言珍藏/追女孩的留言.txt
-
xzdgnslygj_veryhuo.com/软件说明.txt