Static task
static1
Behavioral task
behavioral1
Sample
NBA2K23+±+ú-¦+-¦˜/神罚无延迟锁绿.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
NBA2K23+±+ú-¦+-¦˜/神罚无延迟锁绿.exe
Resource
win10v2004-20230703-en
General
-
Target
7d9e3790b5ea4cfe31bfa70904ffffcf8b9e2d958c5eeaec7ab4df0378f4d620
-
Size
11.9MB
-
MD5
f4ed2fb53f593a9560c23367f9bc0bdd
-
SHA1
9d6d19275084f725426fbc49a79629b500fe9259
-
SHA256
7d9e3790b5ea4cfe31bfa70904ffffcf8b9e2d958c5eeaec7ab4df0378f4d620
-
SHA512
39da248022f02c54c0ad5df7c71ca74d879db2220dbe6a82ec92ccde9daf9c0480dc1d4ddaff9a2f63eeea99685a12c70b3d88adac07a8b84d870fda13a4a30e
-
SSDEEP
196608:Wz+l1HaA5zZ7qEtHch1CiMnmC360XElC0Udb2bx7I+jolruNW5JJPX7:Wz+l16A5zrtHch1CnnmM6RbUdb2lvjUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NBA2K23+±+ú-¦+-¦˜/神罚无延迟锁绿.exe
Files
-
7d9e3790b5ea4cfe31bfa70904ffffcf8b9e2d958c5eeaec7ab4df0378f4d620.zip
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/0.管理员模式启动.png.png
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/1.png.png
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/2.jpg
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/3.jpg
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/4.jpg
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/5.jpg
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/6.png.png
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/7.png.png
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/8.png.png
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/mc公园改身体臂展教程.jpg.jpg
-
NBA2K23+±+ú-¦+-¦˜/-¦++-++-+¦¦¦/使用图文教程/衣服代码(修改器自动全解锁).txt
-
NBA2K23+±+ú-¦+-¦˜/神罚无延迟锁绿.exe.exe windows x86
3b5546fa21beec80c31e80021d93a098
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
RaiseException
ole32
OleUninitialize
user32
PostMessageA
RegisterClipboardFormatA
atl
ord47
shell32
DragQueryFileA
Shell_NotifyIconA
gdi32
ScaleWindowExtEx
LineTo
advapi32
StartServiceA
RegOpenKeyExA
winspool.drv
ClosePrinter
OpenPrinterA
comctl32
ord17
ImageList_Destroy
oledlg
ord8
oleaut32
SafeArrayUnaccessData
LoadTypeLi
shlwapi
PathFileExistsA
winmm
waveOutOpen
ws2_32
inet_ntoa
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 412KB - Virtual size: 408KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE