Static task
static1
Behavioral task
behavioral1
Sample
天降激光炮-图像界面版.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
天降激光炮-图像界面版.exe
Resource
win10v2004-20230621-en
General
-
Target
天降激光炮-图像界面版.exe
-
Size
1.9MB
-
MD5
81df021fd7a1275df23a861bb0dd436a
-
SHA1
75249d4b46a38a8678aecb6ce054f4b05cf30b99
-
SHA256
9ca94f1c18262ad64ee1e51d395d74b76377619f5589c20102a0e593e78e39d0
-
SHA512
31fd24a0661767cb1804236c6484643bed37ac3433dc0ed5743fba2e9580bd2f0c19e2cec94d93400b3de8d7d99017fc26147102cbf4390659b576096f029497
-
SSDEEP
49152:X+q1dc9mJkFLmtKbz+UcURvXDVN20wdkwVufr77fGrg5y:X+q1UmuYtKb5cERN2necX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 天降激光炮-图像界面版.exe
Files
-
天降激光炮-图像界面版.exe.exe windows x86
09dce4c0468af4dfd0932b9a46511d5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
user32
GetForegroundWindow
gdi32
GetTextMetricsA
winmm
midiStreamStop
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetUBound
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 776KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ