Static task
static1
Behavioral task
behavioral1
Sample
qingdantupian.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
qingdantupian.exe
Resource
win10v2004-20221111-en
General
-
Target
e143552a4454238c7724416a9713f802645f3ead986daa88d886e1962ececf07
-
Size
299KB
-
MD5
d60b04872a1caa57575fb63ff62a4c69
-
SHA1
a55b39b67231bc64c409ffc8035b831d6ed4a5d5
-
SHA256
e143552a4454238c7724416a9713f802645f3ead986daa88d886e1962ececf07
-
SHA512
9fd9e5c41272d62e085bd28eeed4f6473251e4b1d73cbcd152b92f0cd2b85ebc175afbf5fb07310d119c21107049040ecb07f20c2c8cf07b223251b76fdcd32d
-
SSDEEP
768:zklm2vwJZ9l7R2EQiWJMwWF62D2XpJy3b9i3b6ybyUSEJgqZ:zkxIZjIEQi6MJF6ZI3E3bcUSEy0
Malware Config
Signatures
Files
-
e143552a4454238c7724416a9713f802645f3ead986daa88d886e1962ececf07.ace
-
out.ace.ace
-
qingdantupian.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
������I Size: - Virtual size: 19.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FISHPEP Size: 42KB - Virtual size: 19.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE