Behavioral task
behavioral1
Sample
1 -2/1-2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1 -2/1-2.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
1 -2xf/1-2xf.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
1 -2xf/1-2xf.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
@创e下载┆9年绿色无弹窗安全.url
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
@创e下载┆9年绿色无弹窗安全.url
Resource
win10v2004-20221111-en
General
-
Target
590b6e8c70b919eda6b643abfc756b2cf2981e9c89674eaa99c2ce9ab16b2a5b
-
Size
2.2MB
-
MD5
2c8c906c351dfa1bdc168f666a102075
-
SHA1
b931b589de03c0f153423fed618f391c6a2c45a2
-
SHA256
590b6e8c70b919eda6b643abfc756b2cf2981e9c89674eaa99c2ce9ab16b2a5b
-
SHA512
2f96da086d0f40291412fe09f6c8f5c1495e4318b93fae235087456e92f618ab94cde9623c981f7f3f7cfd29442bd022ecb350ed1b835ccaefad7a5d35bfd0df
-
SSDEEP
49152:dBY20U81J6yaPEOwbj0iNUQTS+aiiclNaG2JfKpDneULT:LY1UsJ6xf8S6i+NaXsqK
Malware Config
Signatures
-
resource yara_rule static1/unpack001/1 -2/1-2.exe upx static1/unpack001/1 -2xf/1-2xf.exe upx
Files
-
590b6e8c70b919eda6b643abfc756b2cf2981e9c89674eaa99c2ce9ab16b2a5b.rar
-
1 -2/1-2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
1 -2/新版本变态功能使用说明.txt
-
1 -2/稀饭辅助使用说明及常见问题解决办法.txt
-
1 -2xf/1-2xf.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
1 -2xf/新版本变态功能使用说明.txt
-
1 -2xf/稀饭辅助使用说明及常见问题解决办法.txt
-
@创e下载┆9年绿色无弹窗安全.URL.url