Static task
static1
Behavioral task
behavioral1
Sample
dll强制卸载器.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dll强制卸载器.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
绿色下载站首页.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
绿色下载站首页.url
Resource
win10v2004-20221111-en
General
-
Target
495015492487f27322bdc4d8b7d04b33b290f9a788778b06c1c4c265d5c9a4d4
-
Size
483KB
-
MD5
c78de2349e4aca407505d888685b480f
-
SHA1
f91e9fa0d5ed49bb9f1995e1ef1ccf7fa30e4629
-
SHA256
495015492487f27322bdc4d8b7d04b33b290f9a788778b06c1c4c265d5c9a4d4
-
SHA512
e8ea759695961025ff4de373658703c1ce5d4d1a6bc5579222386adfce71fe96cc6eb0711f89b592b111913c3d837754a0096244d1ab2cf16bc4e5727c9528d2
-
SSDEEP
12288:PD0Wv4xHkyOFwfcjLuQVPovKdUtMyDab7e:5v4xHkneEjLu+ovKG6oM7e
Malware Config
Signatures
Files
-
495015492487f27322bdc4d8b7d04b33b290f9a788778b06c1c4c265d5c9a4d4.rar
-
dll强制卸载器.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.bss Size: - Virtual size: 964KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 401KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
使用说明.txt
-
绿色下载站首页.url.url