Static task
static1
Behavioral task
behavioral1
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
新云软件.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
淘宝用户搜索王[小康版].exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
淘宝用户搜索王[小康版].exe
Resource
win10v2004-20231215-en
General
-
Target
15e6a195eb017705da791860a509d658
-
Size
825KB
-
MD5
15e6a195eb017705da791860a509d658
-
SHA1
ea13668180a657d69df1bd32d77ea123bd9370b0
-
SHA256
8d4010631cb89ea87e34d312b8f4afcf9e480ecf9a5e9766e9dd9d9652d4babf
-
SHA512
64085e1a1c047977631136ce3a958fd5f5be37d5a8ef3f9d20ba549150bd44aad5c44934d039371be600f49c788e2909b03cd3c519970049ebf0719f19de030f
-
SSDEEP
24576:0KMbw0HtZ6qBc933o3zYtL5qzZJV7nggIOJ8EPVX:0KMb7HvLBeoagvjQOpPVX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/淘宝用户搜索王[小康版].exe
Files
-
15e6a195eb017705da791860a509d658.rar
-
新云软件.url.url
-
淘宝用户搜索王[小康版].exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�X�i0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�X�i1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�X�i2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE