Static task
static1
Behavioral task
behavioral1
Sample
Windows 7 游戏无法全屏修复工具.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Windows 7 游戏无法全屏修复工具.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
比克尔.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
比克尔.url
Resource
win10v2004-20220812-en
General
-
Target
7148f7a42f0fe900ae68e8539c65dc30e93c6e95b645272fd57f9cad66fd120e
-
Size
899KB
-
MD5
6a3cedf64bf3f37422d8f9937bf5d72d
-
SHA1
a32db5401c3acd176e93a1a3425ca9709e0a0c63
-
SHA256
7148f7a42f0fe900ae68e8539c65dc30e93c6e95b645272fd57f9cad66fd120e
-
SHA512
2df5232347f87be8832849d1dab08443daf2b5670b840ac46f0a8c4c76a9c0fd5b4f23de0a8b0f06886b9b89080b3af3a7171cefb98de4fc2810477955c20e72
-
SSDEEP
12288:u9LcNsu8MaWDFnnKiUl5XDKM0M7Ypv1DBipDD0A4eMaC5piuPp7VdupX10lGeTkL:icsu8iDJKZD8tB+DD0AIxPis7X81jFyU
Malware Config
Signatures
Files
-
7148f7a42f0fe900ae68e8539c65dc30e93c6e95b645272fd57f9cad66fd120e.rar
-
Windows 7 游戏无法全屏修复工具.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 55KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vxkynpfv Size: 846KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dcgtuuou Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
比克尔.url.url