Static task
static1
Behavioral task
behavioral1
Sample
失忆QQ空间刷相册赞软件v1.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
失忆QQ空间刷相册赞软件v1.0.exe
Resource
win10v2004-20220812-en
General
-
Target
f5afa9345975cbefd81302555d37523abbc573420c9196430dc6031ecb6f6daf
-
Size
1.6MB
-
MD5
56f116e6c1e494a6d3d9e1bb167b7982
-
SHA1
6fbee06eb819e136a878acf87c97a7aa4924d219
-
SHA256
f5afa9345975cbefd81302555d37523abbc573420c9196430dc6031ecb6f6daf
-
SHA512
87104747f722b2c8eb55d9fe0797af7046880b0ecfb5a81c3a943193fb76a83a313b871941af96931d7e82efc843ccf4487fe124d35e79393e86a6f887637019
-
SSDEEP
49152:ppTh8+87Kfs1ooLerNRyv8D9V5V3PWUzzWAW/BpOe3dHGet:bh8+8ufsLwNdD9Vu8WZ/BpOQdHGK
Malware Config
Signatures
Files
-
f5afa9345975cbefd81302555d37523abbc573420c9196430dc6031ecb6f6daf.zip
-
下载说明.htm.html .js
-
失忆QQ空间刷相册赞软件v1.0.exe.exe windows x86
0eada16dbd9ab9067d58abd2ec22b3e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
TlsGetValue
user32
GetMenuState
gdi32
SetPixel
winmm
waveOutReset
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
LoadTypeLi
comctl32
ImageList_Duplicate
ws2_32
inet_ntoa
wldap32
ord29
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 600KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ