Static task
static1
Behavioral task
behavioral1
Sample
枪林弹雨绿巨人透视辅助v1.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
枪林弹雨绿巨人透视辅助v1.0.exe
Resource
win10v2004-20221111-en
General
-
Target
f903ce096367f99eb5cd1e6ba221abbf4eebb66ee287e97c99a5ebfbf8d2cec7
-
Size
407KB
-
MD5
f10e364016a96c6d2beb18f1b8600192
-
SHA1
c72b90170e666527fdedd7e365afe31ef760de99
-
SHA256
f903ce096367f99eb5cd1e6ba221abbf4eebb66ee287e97c99a5ebfbf8d2cec7
-
SHA512
08f627ee5d1969c668f9e7b0ff93f99bb3d75868c2f41779bc19100280a402cf33fb4e5a811126f32818dcbbf445dc72633f21dba248b45feb9406880bcfb3d0
-
SSDEEP
6144:Ty9T6d9jmoG/NIVBQjYkPpGN15eepWh62tkpRhypymNAXK7LwlMOIZa:E6d9jXsiQjl4lw42t4nLECK7LwlbIZa
Malware Config
Signatures
Files
-
f903ce096367f99eb5cd1e6ba221abbf4eebb66ee287e97c99a5ebfbf8d2cec7.zip
-
下载说明.htm.html .js
-
枪林弹雨绿巨人透视辅助v1.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Esp0 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Esp1 Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Esp Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE