Behavioral task
behavioral1
Sample
cf乖乖猴刷枪软件【无毒】4.2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf乖乖猴刷枪软件【无毒】4.2.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
数码资源网.url
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
数码资源网.url
Resource
win10v2004-20220901-en
General
-
Target
5f014a949002a3c1148d42ad91d0f91efd6d7ed508c464140daa542eb4a5db1f
-
Size
1.8MB
-
MD5
7c5280876a6d90bf25c68307052e2ddc
-
SHA1
d5114b80d461a65ecb77cc01fd8b69b539a4a80c
-
SHA256
5f014a949002a3c1148d42ad91d0f91efd6d7ed508c464140daa542eb4a5db1f
-
SHA512
ba25b1144a54909a5d4dfc4a907258b30f7bd7efb7c6d47cccf9c9b4e75517f1709d87e7b7a0171fca835f71720c8d60d83d76f4ac72e6678bfefe1be0730524
-
SSDEEP
49152:MylalWPy8uKdJtf6nH583X/87ushXsF+ZsBJv:9uWP+KNf6H5tlJ0jJv
Malware Config
Signatures
-
resource yara_rule static1/unpack001/cf乖乖猴刷枪软件【无毒】4.2.exe upx
Files
-
5f014a949002a3c1148d42ad91d0f91efd6d7ed508c464140daa542eb4a5db1f.rar
-
cf乖乖猴刷枪软件【无毒】4.2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.txt
-
数码资源网.url.url