Static task
static1
Behavioral task
behavioral1
Sample
ȿCFv1.6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ȿCFv1.6.exe
Resource
win10v2004-20220812-en
General
-
Target
d15fa49521b061f1442a7d7db4d042d31310dc3ad0b7b6cb4297fe7c13ff59c9
-
Size
1.6MB
-
MD5
163452bc820ccc29c47b1f5ecd4eab80
-
SHA1
9bf996a8a80e920d2cdd4b8dad15f72023802166
-
SHA256
d15fa49521b061f1442a7d7db4d042d31310dc3ad0b7b6cb4297fe7c13ff59c9
-
SHA512
507f0a6c292856567ad637283ad3b060a168271ac98b48c79acef6198170780c5e6927ae0373fd48555cc1cdfd220a650920863f38fd5af1410d5a40efa0964e
-
SSDEEP
24576:xxnbBclccW/ECM/vIhVVygf0GuWLw7sFDKYcADJS/YHulGPyBmM4wKouyeRmm39Q:xFCK/jMwnygsGuWLFuADvX4lgDRb9r0Z
Malware Config
Signatures
Files
-
d15fa49521b061f1442a7d7db4d042d31310dc3ad0b7b6cb4297fe7c13ff59c9.zip
-
下载说明.htm.html .js
-
ȿCFv1.6.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Esp0 Size: - Virtual size: 964KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Esp1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Esp Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE