Behavioral task
behavioral1
Sample
炫舞刷yy挂-非自慰-3.5.8版/官方网站.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
炫舞刷yy挂-非自慰-3.5.8版/官方网站.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
炫舞刷yy挂-非自慰-3.5.8版/炫舞YY挂-非自慰.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
炫舞刷yy挂-非自慰-3.5.8版/炫舞YY挂-非自慰.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
炫舞刷yy挂-非自慰-3.5.8版/详细内容.doc
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
炫舞刷yy挂-非自慰-3.5.8版/详细内容.doc
Resource
win10v2004-20220812-en
General
-
Target
4140c5491f53e8cf847b36007c7c554f6c61638bf697fd8874287427dd6b2067
-
Size
1.8MB
-
MD5
71f1967ad66ea42cfc2189d31b27712a
-
SHA1
a1b48a453fa1784d0ba01ac2ee2e24149658a8ab
-
SHA256
4140c5491f53e8cf847b36007c7c554f6c61638bf697fd8874287427dd6b2067
-
SHA512
38e6f8e80f0e2c5b5782b7d46c9d96a7c4b61358e5413b4af56f4ecaafe4c545402ad404075cb8e466525525b76362a2fd7f85911d07845e4f4ff21e6c1e33e1
-
SSDEEP
49152:zrriGOWLDDWWQ+3zqPMLnNE07o369+T+eZFvdW:HrixWPDNDePqE07R99eZFlW
Malware Config
Signatures
-
resource yara_rule static1/unpack001/炫舞刷yy挂-非自慰-3.5.8版/炫舞YY挂-非自慰.exe upx
Files
-
4140c5491f53e8cf847b36007c7c554f6c61638bf697fd8874287427dd6b2067.zip
-
炫舞刷yy挂-非自慰-3.5.8版/官方网站.url.url
-
炫舞刷yy挂-非自慰-3.5.8版/炫舞YY挂-非自慰.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 624KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 520KB - Virtual size: 517KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
炫舞刷yy挂-非自慰-3.5.8版/详细内容.doc.doc windows office2003