Static task
static1
Behavioral task
behavioral1
Sample
兔子0121/兔子0121版.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
兔子0121/兔子0121版.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
兔子0121/破解器.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
兔子0121/破解器.exe
Resource
win10v2004-20231215-en
General
-
Target
3187a06b0a68b9ca9033fc1f7aacbb2c
-
Size
1.7MB
-
MD5
3187a06b0a68b9ca9033fc1f7aacbb2c
-
SHA1
c8c0c7080be2553cdf7a5b3e1ca9d24339a62a2e
-
SHA256
42ced0f2427ffee6420d35f1672a481cd7c6af6c2bcdaa0f89d38aa1f839b0c5
-
SHA512
dcc0a80475532b257819bf0e9c50960dd87d23be6bcc81ef08bfda72d4bc3f3f97bbeec529dbdc10b474ed897408fca75e53a55a6f2714059d64c697e609c249
-
SSDEEP
49152:dU67rWuquk8xxNDzuRS5npLYxUbUK9tGstnEuC:bsuk8bNyU5pLKWUKy0EuC
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/兔子0121/兔子0121版.exe unpack001/兔子0121/破解器.exe
Files
-
3187a06b0a68b9ca9033fc1f7aacbb2c.rar
-
兔子0121/Register secret key.cry
-
兔子0121/兔子0121版.exe.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 186KB - Virtual size: 544KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
兔子0121/直接打开破解器即可.txt
-
兔子0121/破解器.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 5KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 868.0MB
.erribi Size: 955KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ