Static task
static1
Behavioral task
behavioral1
Sample
CF和平绝地联盟辅助最稳.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
更多免费优质资源双击进入.url
Resource
win10v2004-20230220-en
General
-
Target
EpicGlobal [V25-1].zip
-
Size
20.9MB
-
MD5
fea411ee0e30d4dd3fcfe86dd34391d4
-
SHA1
e285eec812ab3f713a7a86fb27289974ee416d96
-
SHA256
3f0c3221ee337508b16541e766c6d0dd59ae2d6c5760a62cc8cb976d5a8235ee
-
SHA512
cc9f2fcf56981ffd5b6576e5175d2a3747dac58169a4983397a31231c455f189c52b9df3fe207b2cfa1cf312784a510c0f7c4268c1464ce096dae1faf266f45d
-
SSDEEP
393216:0WZ+arTKJRIryt6FGNcqZjsj7Wc2t/nHy3SCm2suIcagMDznBSCKCHhrsM4AtEIY:pZReXYQ6cGqqxC/nHy3SKs6+nnTsjoFY
Malware Config
Signatures
Files
-
EpicGlobal [V25-1].zip.zip
-
CF和平绝地联盟辅助最稳.url.url
-
README.txt
-
svchost.exe.exe windows x64
1be212486744c1a4fb0a167419cc4f83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
RemoveDirectoryW
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadCursorW
CharUpperBuffW
advapi32
OpenServiceA
shell32
SHChangeNotify
shlwapi
StrCmpW
ntdll
RtlInitUnicodeString
ws2_32
WSAStartup
imm32
ImmSetCandidateWindow
d3dcompiler_47
D3DCompile
dbghelp
ImageRvaToVa
Sections
.text Size: - Virtual size: 551KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.EGlobal Size: - Virtual size: 19.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EGlobal Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EGlobal Size: 21.1MB - Virtual size: 21.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
使用说明[可选][v2.0].png.png
-
使用说明[必看].txt
-
更多免费优质资源双击进入.url.url