Static task
static1
Behavioral task
behavioral1
Sample
SQLServerpas/636网址导航大全.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SQLServerpas/636网址导航大全.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
SQLServerpas/SQL Server 密码修改器 1.3.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
SQLServerpas/SQL Server 密码修改器 1.3.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
SQLServerpas/电脑装机必备软件下载.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
SQLServerpas/电脑装机必备软件下载.url
Resource
win10v2004-20231222-en
General
-
Target
3b015edb77286c2d67ec7f1e897d8b76
-
Size
220KB
-
MD5
3b015edb77286c2d67ec7f1e897d8b76
-
SHA1
b361ecd9ebcb2e28d6509f0cdb4a1d37ea229608
-
SHA256
70a4b260ee508e9f6c2c20540cdae7c70172a9cf2527fa20272e848748089271
-
SHA512
3ab550b9cef54df29dafef2528c09dea4300a86e66aa6c7f17f076193315a40c4c4b28bf4dd3ef9e97e20f7450f6150b5f1fb6935a4bd1386047ea7ab115d2e6
-
SSDEEP
6144:u8d5AZor+4Sn/bmia51aJj8sYZ08C2iaFPyPTM71GeSq:u8nyorInyiaqJjdiiaF6PQZbSq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SQLServerpas/SQL Server 密码修改器 1.3.exe
Files
-
3b015edb77286c2d67ec7f1e897d8b76.rar
-
SQLServerpas/636网址导航大全.url.url
-
SQLServerpas/SQL Server Password Changer.exe.manifest
-
SQLServerpas/SQL Server 密码修改器 1.3.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SQLServerpas/电脑装机必备软件下载.url.url