Static task
static1
Behavioral task
behavioral1
Sample
下载说明.url
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
下载说明.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
巅峰阁批量卡iphone2.7/巅峰阁批量卡iphone2.7.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
巅峰阁批量卡iphone2.7/巅峰阁批量卡iphone2.7.exe
Resource
win10v2004-20221111-en
General
-
Target
f6373eafb17ce7de01b8391db124d53422e6e26c4ddc867e5cc089dc75c41bbd
-
Size
1.7MB
-
MD5
bafeb4c1674f1e1a949eb4f4f3fa4dd5
-
SHA1
82e3bdbc48b235557b9c6052a5d4e623210e7cec
-
SHA256
f6373eafb17ce7de01b8391db124d53422e6e26c4ddc867e5cc089dc75c41bbd
-
SHA512
143d2769664d817cf70bd4073e852ecbd00bdff96f0a9d53e7ec2ece52ac0014d7370840df957c89ec3fde6fc2aa789807a6fbd8eaf82103212d96b90828ffe6
-
SSDEEP
24576:t9usQ1o3ZcpRpbeiIDA1r/CGRh8H/aFVzFtgfjE9mwVEaV18TMwwuUVNu98bbe46:HbQ11pSinRRqQzHgfjE9JUowwuUVNU
Malware Config
Signatures
Files
-
f6373eafb17ce7de01b8391db124d53422e6e26c4ddc867e5cc089dc75c41bbd.zip
-
下载说明.url.url
-
巅峰阁批量卡iphone2.7/巅峰阁批量卡iphone2.7.exe.exe windows x86
aec50f0b615dafef7f7a8b2c5cff0628
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
htonl
rasapi32
RasGetConnectStatusA
kernel32
ReadFile
user32
SendDlgItemMessageA
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayGetUBound
comctl32
ImageList_GetImageCount
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 860KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ