Static task
static1
Behavioral task
behavioral1
Sample
CF作弊龙人物透视显鬼全能版1118sp1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
CF作弊龙人物透视显鬼全能版1118sp1.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
就爱外挂网.htm
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
就爱外挂网.htm
Resource
win10v2004-20231215-en
General
-
Target
00733bb775eab73b4b69c4b59a7d004b
-
Size
860KB
-
MD5
00733bb775eab73b4b69c4b59a7d004b
-
SHA1
b1fd35cc4931a2ccb268498d532fe50a777528d5
-
SHA256
8bbb21f459bf3e457aaec9c78d28519e917e73262e89f79c4a4ff15f794a14ac
-
SHA512
3da3936b83893183681b6b65e88d6ce51bf9aca372773f98cb48d54d4667d8935d4761c028feefd727e6affc4964065eae72ef5a5182cc44dbf967565852943e
-
SSDEEP
24576:aqEMqXsrPKA4CWzgmG31bSGAvYoJ9aVi8S9xxDVec6im4T:jEM6cWtMfOJ4sfXVec6eT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CF作弊龙人物透视显鬼全能版1118sp1.exe
Files
-
00733bb775eab73b4b69c4b59a7d004b.rar
-
92wg说明.txt
-
CF作弊龙人物透视显鬼全能版1118sp1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 918KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
就爱外挂网.htm.html
-
玩家交流群.txt