Behavioral task
behavioral1
Sample
@创e下载┆9年绿色无弹窗安全.url
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
@创e下载┆9年绿色无弹窗安全.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
安卓手机版本下载.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
安卓手机版本下载.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
恋雪变速器.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
恋雪变速器.exe
Resource
win10v2004-20220812-en
General
-
Target
3a6de9b60af8bf73d9cbf8f700a00a1bac374442567fcbbd6cddbf5d4fa06a2d
-
Size
628KB
-
MD5
63e41f3eb464ddd174ef6058b3191ab1
-
SHA1
bfa92182b513aac8a9aac0eafb9e684c15bbebfd
-
SHA256
3a6de9b60af8bf73d9cbf8f700a00a1bac374442567fcbbd6cddbf5d4fa06a2d
-
SHA512
45460d8d5e32a12968191b87414dbb8ab3b1981b3330d4471c2b1d88b2fa4df680817fa5a25a151b70183fb2437c9f5d3700e5b56b5324794dbf54b101d9770a
-
SSDEEP
12288:Dcf/UsNbx3DqNKZA2vC7oySoQeJEqpQFblCLDl+rbipSCk/d6urk9YQzFmu3D:AfR3+t2vrySqJEqOF5CLDlGbips/r4fD
Malware Config
Signatures
-
resource yara_rule static1/unpack001/恋雪变速器.exe upx
Files
-
3a6de9b60af8bf73d9cbf8f700a00a1bac374442567fcbbd6cddbf5d4fa06a2d.rar
-
@创e下载┆9年绿色无弹窗安全.URL.url
-
安卓手机版本下载.URL.url
-
恋雪变速器.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 649KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 480KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 436KB - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ