Static task
static1
Behavioral task
behavioral1
Sample
115网盘小助手1105.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
115网盘小助手1105.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
155绿色软件站.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
155绿色软件站.url
Resource
win10v2004-20231222-en
General
-
Target
6397c7139f23916b772ea912e8ad3077
-
Size
1.0MB
-
MD5
6397c7139f23916b772ea912e8ad3077
-
SHA1
71284def9eb928fe0a1ab6bc571a5a85375b95f2
-
SHA256
443aa5035137d14f487681467f5b622277b8fd98717128d1fcf0c03ec686611e
-
SHA512
aca6f87dcf776fda0333e3ec0e4e55cae95402dfafea20a73a28bcef3bb46064e9e671dbb3085ed6eb0c424476bd064f5101858537ea490230640d98e59bbe6b
-
SSDEEP
24576:zpRE8RQiLWT6QIe8Wv+B0Lx1lNgRI8PkP//jB4E:zDE8RbW2QI/q+B0l1uP2GE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/115网盘小助手1105.exe
Files
-
6397c7139f23916b772ea912e8ad3077.rar
-
115网盘小助手1105.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 340KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
atwpoeol Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
awiuegph Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
155绿色软件站.url.url