Overview
overview
8Static
static
8LOLguaji_g...��.exe
windows7-x64
8LOLguaji_g...��.exe
windows10-2004-x64
8LOLguaji_g...��.htm
windows7-x64
1LOLguaji_g...��.htm
windows10-2004-x64
1LOLguaji_g...��.cmd
windows7-x64
1LOLguaji_g...��.cmd
windows10-2004-x64
7LOLguaji_g...��.url
windows7-x64
1LOLguaji_g...��.url
windows10-2004-x64
1LOLguaji_g...��.url
windows7-x64
1LOLguaji_g...��.url
windows10-2004-x64
1LOLguaji_g...��.url
windows7-x64
1LOLguaji_g...��.url
windows10-2004-x64
1Behavioral task
behavioral1
Sample
LOLguaji_gpxz/LOL-英雄联盟挂机刷金币辅助/LOL英雄联盟.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
LOLguaji_gpxz/LOL-英雄联盟挂机刷金币辅助/LOL英雄联盟.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
LOLguaji_gpxz/Readme-说明.htm
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
LOLguaji_gpxz/Readme-说明.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
LOLguaji_gpxz/启动上网导航.cmd
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
LOLguaji_gpxz/启动上网导航.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
LOLguaji_gpxz/哥乖.url
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
LOLguaji_gpxz/哥乖.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
LOLguaji_gpxz/盘宽.url
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
LOLguaji_gpxz/盘宽.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
LOLguaji_gpxz/绿软下载站.url
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
LOLguaji_gpxz/绿软下载站.url
Resource
win10v2004-20221111-en
General
-
Target
d941fd229ee3b56b00d9ebf80f715f435fe47138ffa0b421dd7df66678530bd3
-
Size
339KB
-
MD5
ebf317ac4b88b0909252a147759a2834
-
SHA1
e15109f5df49932be82b467fad7e39feb289ca83
-
SHA256
d941fd229ee3b56b00d9ebf80f715f435fe47138ffa0b421dd7df66678530bd3
-
SHA512
4ff035d3e75e9630c48b58054c604ab7b3ed6b35c23e26513da35bc0f4a6a23ae9cb898dddf72b07c2c3ffb5378adb908e2207c028e899108c80144bb87bc710
-
SSDEEP
6144:k8KEstgO7avLB1OkxtyMygcAu2o6SKVpRnJyzkcu111qILgGi/2oOd8p/jZCW3A:k8KEsEvLBMkxtfFqxKvBcu1j7xiLOq/Q
Malware Config
Signatures
-
resource yara_rule static1/unpack001/LOLguaji_gpxz/LOL-英雄联盟挂机刷金币辅助/LOL英雄联盟.exe upx
Files
-
d941fd229ee3b56b00d9ebf80f715f435fe47138ffa0b421dd7df66678530bd3.rar
-
LOLguaji_gpxz/LOL-英雄联盟挂机刷金币辅助/LOL英雄联盟.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 440KB - Virtual size: 437KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
LOLguaji_gpxz/Readme-说明.htm.html
-
LOLguaji_gpxz/启动上网导航.cmd
-
LOLguaji_gpxz/哥乖.url.url
-
LOLguaji_gpxz/盘宽.url.url
-
LOLguaji_gpxz/绿软下载站.url.url
-
LOLguaji_gpxz/說明.txt