Static task
static1
Behavioral task
behavioral1
Sample
ɢؼθ п V4.7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ɢؼθ п V4.7.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
QQ.url
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
QQ.url
Resource
win10v2004-20221111-en
General
-
Target
ac952732b2602d85cbf26ad457516570de2cb35932869b21f4daeda7d5985f29
-
Size
1.6MB
-
MD5
89b74a4a96c4b14b51ee995cc9ecf438
-
SHA1
b8f4dcaefcc5d4bf24c457de2ee2bb9a6685b5f3
-
SHA256
ac952732b2602d85cbf26ad457516570de2cb35932869b21f4daeda7d5985f29
-
SHA512
fd939d7394fbf75babf1410896ac0520ecc6b19b0f9e90e01d6523056219293977b16963f5575c455393d42927ee18a5fe2cfa73e331053f29e50b70864bb3a3
-
SSDEEP
49152:IPtkuwfzASXvEgDOHxePkgPoSGI+RPST86dUZXk83:2tSbR/E6OokcoSG7wekg
Malware Config
Signatures
Files
-
ac952732b2602d85cbf26ad457516570de2cb35932869b21f4daeda7d5985f29.zip
-
ɢؼθ п V4.7.exe.exe windows x86
ce88fae3a8d81ce5ecde078af1c1d345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
IsIconic
gdi32
ExtTextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 796KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
װʹ˵.txt
-
QQ.url.url