Behavioral task
behavioral1
Sample
白云下载站.url
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
白云下载站.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
说明.htm
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
说明.htm
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
ϼ35.1.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ϼ35.1.exe
Resource
win10v2004-20221111-en
General
-
Target
62dbcd14c6d323d97f5e9594b8de3496fe0662e419ecc5f2462e8df830c6e185
-
Size
2.3MB
-
MD5
1a7f2a103658e8a77a86c19052d3cf79
-
SHA1
4ed847ce0a3753a11c9b5451b6d9317f6367fd67
-
SHA256
62dbcd14c6d323d97f5e9594b8de3496fe0662e419ecc5f2462e8df830c6e185
-
SHA512
fd6586d092b3297f06852af73b1a1bf45ac7c4d24983e99361a2346422c2ee6171bca6fe2de341c79437b94af8214c17c252abd9c0adcd0418843bc885dcf811
-
SSDEEP
49152:RqSO3/6orAPz+H2kHF/mnTQ8Rep/onefWpjd/+AV7Ff:RnJb+H5HE6/onXl+q7Ff
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ϼ35.1.exe upx
Files
-
62dbcd14c6d323d97f5e9594b8de3496fe0662e419ecc5f2462e8df830c6e185.zip
-
下载说明.txt
-
白云下载站.url.url
-
说明.htm.html
-
ϼ35.1.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE