Static task
static1
Behavioral task
behavioral1
Sample
宅男影音/pplayer_22_176722_.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
宅男影音/pplayer_22_176722_.exe
Resource
win10v2004-20221111-en
General
-
Target
a3e8b466b25f7e4b14d559c219f674adf8bf4fa7e6b0706c371615864f2c931d
-
Size
1.2MB
-
MD5
74ce9f5da368df5ab1f0254c50af9426
-
SHA1
27d5137fa2d30c60f9d22283e7fe7d695798f980
-
SHA256
a3e8b466b25f7e4b14d559c219f674adf8bf4fa7e6b0706c371615864f2c931d
-
SHA512
b2ff65dc70e99461c679e2e8ab4fca032dfdd3900668c8b5d16abe4e66fc5c9cd2f3a0042ac68325d9d4706374193cdd2e7757ea38c57f1ee2c64700d52abae1
-
SSDEEP
24576:zzLU2PmgvZVfxM6PKIYLIvW9ON/Jv+pYC+BiUj8Fq1kgeto/xep6a:zHnemZVm0vW9ON/h7H7jvMo0pB
Malware Config
Signatures
Files
-
a3e8b466b25f7e4b14d559c219f674adf8bf4fa7e6b0706c371615864f2c931d.rar
-
宅男影音/pplayer_22_176722_.exe.exe windows x86
Code Sign
51:9d:38:65:ce:90:7a:07:6a:96:54:2a:75:7e:18:75:61:91:ac:23Signer
Actual PE Digest51:9d:38:65:ce:90:7a:07:6a:96:54:2a:75:7e:18:75:61:91:ac:23Digest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ