Static task
static1
Behavioral task
behavioral1
Sample
QQKILLER/QQKILL.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
QQKILLER/QQKILL.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
QQKILLER/QQKILL.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
QQKILLER/QQKILL.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
帮助.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
帮助.url
Resource
win10v2004-20221111-en
General
-
Target
e1fd54ea2d033b61c8664f448d7ceb905735ff4fdeec1f7d3a8f218b9bb42e74
-
Size
415KB
-
MD5
9d3c440016c88e49eb51c24835e586b8
-
SHA1
66a1e4a7f4d3382d0597b937342cfb96aa22295f
-
SHA256
e1fd54ea2d033b61c8664f448d7ceb905735ff4fdeec1f7d3a8f218b9bb42e74
-
SHA512
1f9158a5592619442842118514cd2a5d2d90e6bac1c3c8d0bacd99aaddd8d9cf9e8ca42be804a663c4db8ad3b49acd50ac4a8b4559b03de72c9164c86d30ad3d
-
SSDEEP
6144:VaDl+N2oByEtRotHPFOASWVIBddtwowanc6worSKSSkthewWrfl7BRLMw460zJFK:8DgN2kZtMkzndtw1anlTyc8FnUT
Malware Config
Signatures
Files
-
e1fd54ea2d033b61c8664f448d7ceb905735ff4fdeec1f7d3a8f218b9bb42e74.rar
-
QQKILLER/QQKILL.DLL.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 531KB - Virtual size: 530KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
QQKILLER/QQKILL.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
QQKILLER/使用说明.txt
-
帮助.url.url
-
建站无忧jz5u.com说明.txt