Static task
static1
Behavioral task
behavioral1
Sample
使用说明.htm
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
使用说明.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
超级大乐透预测大师.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
超级大乐透预测大师.exe
Resource
win10v2004-20220812-en
General
-
Target
79a7c72a8320a5abca2a70ea82186362b5889eea3ed5350cf69d26d20a81d8ac
-
Size
558KB
-
MD5
90814d4615395fc9ff279ff79005f416
-
SHA1
2d45ccc05b1d9224f97eb4b1f0455de7845f5506
-
SHA256
79a7c72a8320a5abca2a70ea82186362b5889eea3ed5350cf69d26d20a81d8ac
-
SHA512
0a052cd9ff7f7cbebe0a1b04736943411a924962d885053349189b35277ac9338f7e7019490fd95d647ec09db98cd664eab4f22d5903389e7f41f34c459c18ce
-
SSDEEP
12288:BQkzwMywe3fFJ6rdCHAWtUA28cx0HD+gV0Y0Kbv9LPwYUGdE7v:B/zIJ65CHA0UA28cx03V0Y0KL1i7v
Malware Config
Signatures
Files
-
79a7c72a8320a5abca2a70ea82186362b5889eea3ed5350cf69d26d20a81d8ac.rar
-
使用说明.htm.html
-
使用说明.txt
-
超级大乐透预测大师.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 149KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE