Behavioral task
behavioral1
Sample
使用必读.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
使用必读.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
绿色先锋下载.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
绿色先锋下载.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ǹӢ v1.0.3.5.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ǹӢ v1.0.3.5.exe
Resource
win10v2004-20221111-en
General
-
Target
d799c3ffc6e7ab2abf59c3bd0982631c84c25f69d5ddacc901c3c6ac08ad6442
-
Size
2.5MB
-
MD5
d84f7f70936a7342a0e1f59b13aed607
-
SHA1
0fd27f6094e9e3b5ad3c4dc6f1851d5604e5c998
-
SHA256
d799c3ffc6e7ab2abf59c3bd0982631c84c25f69d5ddacc901c3c6ac08ad6442
-
SHA512
db289b8b486ffc10ca5d0be7f3e894340e155f0d91ad50f190f291216d6477e343b6960eb18a9cab8da18b5a608701607e8139f61628898786a20d9876a5f34a
-
SSDEEP
49152:HiWSdpcQZRT/uxaJbU7rWOQ6xFSxSeuUdrxMpPiUaLqJnL:MdSQZZBY76OdSgAxMpPiWxL
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ǹӢ v1.0.3.5.exe aspack_v212_v242
Files
-
d799c3ffc6e7ab2abf59c3bd0982631c84c25f69d5ddacc901c3c6ac08ad6442.zip
-
使用必读.url.url
-
绿色先锋下载.url.url
-
ǹӢ v1.0.3.5.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 281KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.2MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE