Static task
static1
Behavioral task
behavioral1
Sample
芊羽QQ空间装扮器/绿色先锋首页_greenxf.com.url
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
芊羽QQ空间装扮器/绿色先锋首页_greenxf.com.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
芊羽QQ空间装扮器/芊羽QQ空间装扮器2.2.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
芊羽QQ空间装扮器/芊羽QQ空间装扮器2.2.exe
Resource
win10v2004-20220812-en
General
-
Target
5eb85e87039df94c8f9f4dd07fd53eff64a94dc7a4416d8e670d0e12b6a944a0
-
Size
505KB
-
MD5
fc1f4e8724ef5b43ddbd5fcf703c6824
-
SHA1
1fd8b1e034506259c86afa34ad503eea2d579b87
-
SHA256
5eb85e87039df94c8f9f4dd07fd53eff64a94dc7a4416d8e670d0e12b6a944a0
-
SHA512
1b232d2051e0b422fae52d2d84d1a844e13518ae058b2516c168d88aafcd39b5a0b2c03ec11eb527455ab20f48a5da35c27c628ee2aa081254d21321d9a0bc0e
-
SSDEEP
12288:qqdBsT+h3fbq1LM9vVyHj5Wc/WXWZly+wTuvCK:lPsUTSLndEXUlyhTM
Malware Config
Signatures
Files
-
5eb85e87039df94c8f9f4dd07fd53eff64a94dc7a4416d8e670d0e12b6a944a0.rar
-
芊羽QQ空间装扮器/绿色先锋首页_greenxf.com.url.url
-
芊羽QQ空间装扮器/芊羽QQ空间装扮器2.2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 94KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 526KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
芊羽QQ空间装扮器/软件使用说明greenxf.com.txt