Behavioral task
behavioral1
Sample
cxzmxyxgqpz_gr/cxzmxyxgqpz/残霞造梦西游3修改器4.8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cxzmxyxgqpz_gr/cxzmxyxgqpz/残霞造梦西游3修改器4.8.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
cxzmxyxgqpz_gr/更多软件下载.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
cxzmxyxgqpz_gr/更多软件下载.url
Resource
win10v2004-20220812-en
General
-
Target
5372f7de721b38a53f3b1e7dd0e7303b6286ad7c5e89001b9ca466c0291c392f
-
Size
2.2MB
-
MD5
adc35b4bfdfa2c5e218fa3af942af24e
-
SHA1
5a59d4f6344736b8fa61196819d8091d7979ff41
-
SHA256
5372f7de721b38a53f3b1e7dd0e7303b6286ad7c5e89001b9ca466c0291c392f
-
SHA512
2e9a805997b48699b59d176fac3d6a7f2134d6824d0c4e3aa60b83e255d2b0c00d1186b17e3c626d263454850d83cff756facc24bbcc94367d3b5f1a7b162a19
-
SSDEEP
49152:XbEjg7nJ+IyKOq/Hx6Zk7Pieay30ASMNDLulOEg2K7IcG:igTJ+XqJxjkyEASPgEg2oIcG
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cxzmxyxgqpz_gr/cxzmxyxgqpz/残霞造梦西游3修改器4.8.exe upx
Files
-
5372f7de721b38a53f3b1e7dd0e7303b6286ad7c5e89001b9ca466c0291c392f.zip
-
cxzmxyxgqpz_gr/cxzmxyxgqpz/残霞造梦西游3修改器4.8.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
cxzmxyxgqpz_gr/更多软件下载.url.url
-
cxzmxyxgqpz_gr/软件下载说明.txt