Static task
static1
Behavioral task
behavioral1
Sample
װ2.0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
װ2.0.exe
Resource
win10v2004-20221111-en
General
-
Target
6fb98833a3504121684eb7126eb60d3efa718000228c549790df0eae526315d2
-
Size
2.1MB
-
MD5
fea2cdd09d5925033368982cfd6dc265
-
SHA1
75c3a186b00cab1bae6945e7fd5d5130cf5f7ccb
-
SHA256
6fb98833a3504121684eb7126eb60d3efa718000228c549790df0eae526315d2
-
SHA512
1fe5f77bf6c0fd4a31c394ca40a7fac07c4b76d88d49275a2fc7594c71ed9ad08278de9e396404e4df89fc9829a400af2c218f598e0f127389053214ad7cc891
-
SSDEEP
49152:Ke8Jwv+v9X/RAKUzUERjUKCP0qbOsTtbOHOCYx5ABRzSJiwRb3oU08gI:SJwvUNSpgUj0P0qbOytbOu5x5CRzSJiy
Malware Config
Signatures
Files
-
6fb98833a3504121684eb7126eb60d3efa718000228c549790df0eae526315d2.zip
-
װ2.0.exe.exe windows x86
ad735b1c26efa30ada3f1dc0e76713e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
GetTimeZoneInformation
user32
DeleteMenu
gdi32
ExtTextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
下载说明.htm.html .js