Behavioral task
behavioral1
Sample
上千年网络 Shangqn.Com.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
上千年网络 Shangqn.Com.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
梦幻千年.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
梦幻千年.exe
Resource
win10v2004-20220901-en
General
-
Target
c570fe07a8560c554e87d2b8b12a60dbb70d99d5adda0bdbc4150e800548c8d0
-
Size
6.1MB
-
MD5
76e73ea1613c67f48fd9f2e5563d93b2
-
SHA1
06ec3d8d3a6d4c180b130bdf930f7c6a32ee9226
-
SHA256
c570fe07a8560c554e87d2b8b12a60dbb70d99d5adda0bdbc4150e800548c8d0
-
SHA512
2a59d78ab043f6ae54d9c745226b49776ef1ec0697109c0207c253484604bd3ab76aea0b3207f7abbc83626e70a912bfca1a00a7081d7356abf104a8e2534c5b
-
SSDEEP
196608:7iLEQC2ksmjq0msr5m9UurkwaeARIjJwKgWgk:7UEQCdlqqM97rk7RI/gk
Malware Config
Signatures
-
resource yara_rule static1/unpack001/梦幻千年.exe upx
Files
-
c570fe07a8560c554e87d2b8b12a60dbb70d99d5adda0bdbc4150e800548c8d0.rar
-
logdq.bmp
-
logon.bmp
-
page.ini
-
selchrdaq.bmp
-
selectchar.bmp
-
south.bmp
-
upbottom.bmp
-
上千年网络 Shangqn.Com.url.url
-
上千年网络_必读.txt
-
梦幻千年.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 440KB - Virtual size: 437KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ