Static task
static1
Behavioral task
behavioral1
Sample
追逐全屏.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
追逐全屏.exe
Resource
win10v2004-20221111-en
General
-
Target
6f2d349c34defe02fdaef4c72623ca01b88e461d37f996d15f1f7c3a1d133784
-
Size
557KB
-
MD5
d0a36c850718f446fb6b6dc4fb86d5f2
-
SHA1
4fa9904a25908f53c7815ec4f1a2851601289bdf
-
SHA256
6f2d349c34defe02fdaef4c72623ca01b88e461d37f996d15f1f7c3a1d133784
-
SHA512
dc71eef274bb8a7eafabf3ecb5a4bc57cca9aa3c8482cff8fc198c229502a28a1fb8af3c197074a00cb6734fd2a9b1366b9feb52bd07c10e0923e55f1c2e11df
-
SSDEEP
12288:Z184e073PaOsZ59xli0n6TTtJayRLZ5FGg95v9IorQeS/Y:o4TPah39riTTTtJaSLZP5v9IO
Malware Config
Signatures
Files
-
6f2d349c34defe02fdaef4c72623ca01b88e461d37f996d15f1f7c3a1d133784.rar
-
追逐使用说明.txt
-
追逐全屏.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 542KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ