Static task
static1
Behavioral task
behavioral1
Sample
xiangqing.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
xiangqing.exe
Resource
win10v2004-20220812-en
General
-
Target
f3248ec32f85e96de19e34b067c6e2643f0a1066d928c385594ca6b70208ee77
-
Size
1.1MB
-
MD5
4a8c64ce742847bccc0c1070bf195c4d
-
SHA1
2fd890621df5970be6a623d01e52ac54b6caf24a
-
SHA256
f3248ec32f85e96de19e34b067c6e2643f0a1066d928c385594ca6b70208ee77
-
SHA512
09be83f828ed99ab8dd00b812ca3408f2c5a97d24513612f2761109118010367ce079e4df85706369ffb0bef38d3676f0b09d780f119a1f7c89f00732abce3d3
-
SSDEEP
24576:P6ItP2pF7kBxE7Xqyy33V/gSpKn4cM1h6y5:xeXnzToWSpK4Lh6M
Malware Config
Signatures
Files
-
f3248ec32f85e96de19e34b067c6e2643f0a1066d928c385594ca6b70208ee77.ace
-
out.ace.ace
-
xiangqing.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 20.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 880KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ