Behavioral task
behavioral1
Sample
看海弹窗广告杀手/看海升级.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
看海弹窗广告杀手/看海升级.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
看海弹窗广告杀手/看海弹窗广告杀手.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
看海弹窗广告杀手/看海弹窗广告杀手.exe
Resource
win10v2004-20221111-en
General
-
Target
13da551972698b87c72be38a2eb9646c11c4a1df325b669d9e76f792cae7b14d
-
Size
1.4MB
-
MD5
0bc6f0a10482763827baa06883057f13
-
SHA1
641b0befbfc342dee3ebc34d0f4df9a53333a824
-
SHA256
13da551972698b87c72be38a2eb9646c11c4a1df325b669d9e76f792cae7b14d
-
SHA512
68b421483b1a14dec8270e645e9f0564857f3baf1bff7ba16bf98684c6bdfb20234ae7dca5f93c4de25527e9433df06a303fe0edd0f9e58a022f7f31b11c625e
-
SSDEEP
24576:Rg5MY5U5Xc1x/sDdXEp14q5YPl95Zs19W2Y9RqDLh7K7IQAwIxHZHPLTfXWGlCSh:OF5UiT5p14/l95ZFlG/RK7IJP1FP/XWQ
Malware Config
Signatures
-
resource yara_rule static1/unpack001/看海弹窗广告杀手/看海升级.exe upx static1/unpack001/看海弹窗广告杀手/看海弹窗广告杀手.exe upx
Files
-
13da551972698b87c72be38a2eb9646c11c4a1df325b669d9e76f792cae7b14d.rar
-
看海弹窗广告杀手/1.jpg
-
看海弹窗广告杀手/2.jpg
-
看海弹窗广告杀手/seesea.db
-
看海弹窗广告杀手/spy.cur
-
看海弹窗广告杀手/不看不能用好本软件.txt
-
看海弹窗广告杀手/右下角de约定.jpg
-
看海弹窗广告杀手/看海升级.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 684KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 395KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 481KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 463KB - Virtual size: 463KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
看海弹窗广告杀手/看海弹窗广告杀手.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 947KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 481KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ