Overview
overview
8Static
static
8IMTalk6.0�....0.exe
windows7-x64
1IMTalk6.0�....0.exe
windows10-2004-x64
1IMTalk6.0�...��.url
windows7-x64
1IMTalk6.0�...��.url
windows10-2004-x64
1IMTalk6.0�...��.url
windows7-x64
1IMTalk6.0�...��.url
windows10-2004-x64
1IMTalk6.0�...��.exe
windows7-x64
8IMTalk6.0�...��.exe
windows10-2004-x64
8Behavioral task
behavioral1
Sample
IMTalk6.0绿色版/IM TALK英语聊天室4.0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
IMTalk6.0绿色版/IM TALK英语聊天室4.0.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
IMTalk6.0绿色版/华彩联盟论坛.url
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
IMTalk6.0绿色版/华彩联盟论坛.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
IMTalk6.0绿色版/华彩软件站-使用必读.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
IMTalk6.0绿色版/华彩软件站-使用必读.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
IMTalk6.0绿色版/绿化.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
IMTalk6.0绿色版/绿化.exe
Resource
win10v2004-20220812-en
General
-
Target
f10b02f0cee4ad6f8edc8763ef8ca023766026b95cb5ec24d8171a9915292b4b
-
Size
346KB
-
MD5
8a1e1860990f6d2822539e97bb76c3de
-
SHA1
e4a161719a554e5416da104c23f23bb1e078f6c8
-
SHA256
f10b02f0cee4ad6f8edc8763ef8ca023766026b95cb5ec24d8171a9915292b4b
-
SHA512
9a203582a2c290a63430752b98e4f6fda422397e6ab5126333c7c682530bc9b814d22bb026d157486581c38d649dbdf395e52bd0d845890b67e6374355ab7bcc
-
SSDEEP
6144:vY9GHXdMVVOL425jOhS2Rvxq70nX9iIXI8DoKcles9CeBcEW0DUn/dYjrLHQQPPx:yGHSwMhxRg8dI8DoKcRI0cEW0D+dsdPJ
Malware Config
Signatures
-
resource yara_rule static1/unpack001/IMTalk6.0绿色版/绿化.exe upx
Files
-
f10b02f0cee4ad6f8edc8763ef8ca023766026b95cb5ec24d8171a9915292b4b.rar
-
IMTalk6.0绿色版/IM TALK英语聊天室4.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
IMTalk6.0绿色版/下载说明.txt
-
IMTalk6.0绿色版/华彩联盟论坛.url.url
-
IMTalk6.0绿色版/华彩软件站-使用必读.url.url
-
IMTalk6.0绿色版/安装说明.txt
-
IMTalk6.0绿色版/绿化.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE