Static task
static1
Behavioral task
behavioral1
Sample
QQ空间秒赞秒评论系统1.2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
QQ空间秒赞秒评论系统1.2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20220901-en
General
-
Target
e0c8ec86599b780881b9b93f4e4c820df408721785207402588a86debc93abe3
-
Size
1.1MB
-
MD5
17cbe9e57e6c8a05aa50acf8ad485d3f
-
SHA1
fb457561f2e286b86b70a80179c48b12587fef30
-
SHA256
e0c8ec86599b780881b9b93f4e4c820df408721785207402588a86debc93abe3
-
SHA512
760f9185829560bae8f2741b4930c23950ea47c56af204a671ab6787dc011a89282a702586ed34487efa5c05513c9ab2f12f98fb177e8c0fa94659edd1bd6d33
-
SSDEEP
24576:+UBJWFOeL03jURmczXYiKoYSAh3ZJ1TCXgMPKB:HBJW7Y3jCYiK9jh9TCwCI
Malware Config
Signatures
Files
-
e0c8ec86599b780881b9b93f4e4c820df408721785207402588a86debc93abe3.zip
-
QQ空间秒赞秒评论系统1.2.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 480KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xkndhjhu Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqefayte Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.txt
-
新云软件.url.url