Static task
static1
Behavioral task
behavioral1
Sample
FlashP2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FlashP2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
帮助.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
帮助.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
袖珍电子地图2007(覆盖全国各地详细地址).url
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
袖珍电子地图2007(覆盖全国各地详细地址).url
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
金山毒霸2007无限升级破解版.url
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
金山毒霸2007无限升级破解版.url
Resource
win10v2004-20220812-en
General
-
Target
5ce62baab197f97d6c823f3a8ed6997cf9634f809494264d7dbe2c8f50b38be8
-
Size
743KB
-
MD5
e2bbfe2d047b4b9cdcbfd7f57bb37a3a
-
SHA1
eaca4abb64a7519fe333b39b0db871e550f92205
-
SHA256
5ce62baab197f97d6c823f3a8ed6997cf9634f809494264d7dbe2c8f50b38be8
-
SHA512
b478ab660de7cb970b21759e33d1545c0235515a6be8137147a8d04b752a9bd5a1ab23b724f7c1bf436bbfd169a906bf13980da3fc150bb47badf3bcca20d8ad
-
SSDEEP
12288:pw5H+nxEYipVK/LIKQNK9lOA6D7MHOmbpWg1ZdW0sV/KclKf621dMA9bxtq4QKWa:pwYRipE/LIKQNsj6/KNbkgHdK/KclKfZ
Malware Config
Signatures
Files
-
5ce62baab197f97d6c823f3a8ed6997cf9634f809494264d7dbe2c8f50b38be8.rar
-
FlashP2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 277KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 344KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
安装使用说明.txt
-
帮助.url.url
-
袖珍电子地图2007(覆盖全国各地详细地址).url.url
-
金山毒霸2007无限升级破解版.url.url