Static task
static1
Behavioral task
behavioral1
Sample
ϢȡС V1.2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ϢȡС V1.2.exe
Resource
win10v2004-20220812-en
General
-
Target
5f7bbb8d724bbfc2f1dad2198d7ebae7c1e7418e7b6c660d2cce842d11173690
-
Size
1.6MB
-
MD5
13e983a15bf91f5c19ad725eee6c7ca9
-
SHA1
d001a593168b2cca7882e478712c36870b94377f
-
SHA256
5f7bbb8d724bbfc2f1dad2198d7ebae7c1e7418e7b6c660d2cce842d11173690
-
SHA512
3ad7e980c8a995da5f3d62cff29a93c71054bc62845cfbd462ad5712daaa9b5add3386f2a784efbcdf9f5ce8f0b62081ca8eec793c10214d9c4b1f07159d8068
-
SSDEEP
49152:+ddcVsOMuufpLK2WZ5caDvXWA8kIY4vnfDvEYI:9mOMuufY3ZSE/WxxY4vbvEYI
Malware Config
Signatures
Files
-
5f7bbb8d724bbfc2f1dad2198d7ebae7c1e7418e7b6c660d2cce842d11173690.zip
-
QQͼ20130221170913.png.png
-
ɱ.txt
-
ʹ˵.txt
-
下载说明.htm.html .js
-
ϢȡС V1.2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Esp0 Size: - Virtual size: 688KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Esp1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE