Static task
static1
Behavioral task
behavioral1
Sample
快速Ping扫描工具 QuickPing 0.8(1).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
快速Ping扫描工具 QuickPing 0.8(1).exe
Resource
win10v2004-20230220-en
General
-
Target
快速Ping扫描工具 QuickPing 0.8(1).exe
-
Size
423KB
-
MD5
869ba7ecb8aab466063a8d795114e0c6
-
SHA1
6009f759c16be6738325e009af3f961342da1e3e
-
SHA256
76414d0e9cf9c73b116bb03aa045a41d91d43be7d925d9dd36925532a4294a45
-
SHA512
f10c981d6987e3e5d6563535cd6987e26c24a11ad4b1290d3915266ec4c026d141bdc39b61c54af89adf909a092feefe7c54486daf563c9f2d67f15bd10cbb49
-
SSDEEP
6144:m8wDIeIwp7RVtnvMi6Mzfoh5Hy/PiRrNaBMXmVLd1dK2pErWvpZH/gSvi:TAPH1OH9h4P8NkMXcLrdKPrWvPf1v
Malware Config
Signatures
Files
-
快速Ping扫描工具 QuickPing 0.8(1).exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ