Behavioral task
behavioral1
Sample
wangsujisuanqi/ټ.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
wangsujisuanqi/ټ.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
比克尔.url
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
比克尔.url
Resource
win10v2004-20220901-en
General
-
Target
c025386984e0d26799d5918f8766a0d748838571961e0f361bb446d7260ef552
-
Size
236KB
-
MD5
0401bde5c7bcec24893c0da98dae3028
-
SHA1
02a17ec127412e86220776cd17c85cf3403a2402
-
SHA256
c025386984e0d26799d5918f8766a0d748838571961e0f361bb446d7260ef552
-
SHA512
f97e326180d6b292081166763ca50f8a1b52533ffd4c98a3955331ad86d5585da1386caa9807d18e6c97573531d7f78ed8ef9113e04735c9d7a2e2b8675ba2a9
-
SSDEEP
3072:uAt41428cY2Z46xtaIDTAFpABNSr3VhGo8njGdhtNOkq0ME0gsBMU2R5vEKa+mzJ:uz8cY2jDFDmpALuGn17E0veF5cKUzKe
Malware Config
Signatures
-
resource yara_rule static1/unpack001/wangsujisuanqi/ټ.exe upx
Files
-
c025386984e0d26799d5918f8766a0d748838571961e0f361bb446d7260ef552.zip
-
wangsujisuanqi/ټ.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 402KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wacwy Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
比克尔.url.url