Static task
static1
Behavioral task
behavioral1
Sample
ɢؼθ CFСV1.6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ɢؼθ CFСV1.6.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20220812-en
General
-
Target
bf6c6243ca7a29d265efd266ff5d18d49253dce61c0cdc59d5804a3e5a706abe
-
Size
2.5MB
-
MD5
054a21ddd86c53cd62ec786e37d5e253
-
SHA1
86dd7b6870095b3f917a4ac7fbf1b4b511f75e91
-
SHA256
bf6c6243ca7a29d265efd266ff5d18d49253dce61c0cdc59d5804a3e5a706abe
-
SHA512
13d304256e41859ffcecc2d156506665ad93332e3bd8ec03310d0cd6f01357045de8c6fdf2d36fad95d185211c5cdfef985e612c25316b34497ae5bcbdd6c52a
-
SSDEEP
49152:Ccs3lfpagMXrtNHlhr7MxpsMBdAF22A/FmuQe7v73rIYkcwbNMxo4+ctQA4Khb2p:C13WgiRNHX7gmB02ADQe7zMYkdMxYctw
Malware Config
Signatures
Files
-
bf6c6243ca7a29d265efd266ff5d18d49253dce61c0cdc59d5804a3e5a706abe.zip
-
ɢؼθ CFСV1.6.exe.exe windows x86
ce88fae3a8d81ce5ecde078af1c1d345
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
IsIconic
gdi32
ExtTextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 540KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
下载说明.txt
-
新云软件.url.url