Behavioral task
behavioral1
Sample
1-2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1-2.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
稀饭论坛.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
稀饭论坛.url
Resource
win10v2004-20221111-en
General
-
Target
84524c0b0665a7e4347445aa4c3fa8a0a69b4f1115783906a073128c1effaccc
-
Size
1.1MB
-
MD5
777e1b618b894d7071a4f22361e0bf34
-
SHA1
36227283370a85b81e3ef5caf32673367c08422d
-
SHA256
84524c0b0665a7e4347445aa4c3fa8a0a69b4f1115783906a073128c1effaccc
-
SHA512
5ea61d8d9057cc9e6f64451bf5949a6ba622fcbbe4fc4f2b763612714d8f2e1afecfac8de3425368e9445b0858c26f2932d1f137529b71b3a3df9c5d5e09d624
-
SSDEEP
24576:r4gSUwqiEnPw/W817Fv6/bjx7VhYYiGewRng7mRZ+HsD72gM5ST:r4gSUwxEnIWqgBVIZ7cnlQST
Malware Config
Signatures
-
resource yara_rule static1/unpack001/1-2.exe upx
Files
-
84524c0b0665a7e4347445aa4c3fa8a0a69b4f1115783906a073128c1effaccc.rar
-
1-2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新版本变态功能使用说明.txt
-
稀饭论坛.url.url
-
稀饭辅助使用说明及常见问题解决办法.txt