Behavioral task
behavioral1
Sample
QQռȫ1.7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
QQռȫ1.7.exe
Resource
win10v2004-20221111-en
General
-
Target
488d82a366b82efb8ede9046b9752c3bbb799e8dc5a1759cf65bde7cad8a0cd1
-
Size
1.3MB
-
MD5
1fe84f08c272aa7903819643e6500d8e
-
SHA1
363be166506cff3ddfc549ff8a43a0750e981c29
-
SHA256
488d82a366b82efb8ede9046b9752c3bbb799e8dc5a1759cf65bde7cad8a0cd1
-
SHA512
649c6aacd3abc3c6fc26b6ed5884e03e814a8e020dbe2fa9302244a2be75b9aa15684e366b19a2c9eaf4e908af0c0a7f2df333801435e2269f987a8c70dc5def
-
SSDEEP
24576:hey/3f+x3ygbz++StxuaP5CEx4dnFlFuRAlmIJdBAkv9nRuin816+GcifP:cyvf+R/+Dtg+N4Oimyb9nkc8I+GcifP
Malware Config
Signatures
-
resource yara_rule static1/unpack001/QQռȫ1.7.exe upx
Files
-
488d82a366b82efb8ede9046b9752c3bbb799e8dc5a1759cf65bde7cad8a0cd1.zip
-
QQռȫ1.7.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE