Static task
static1
Behavioral task
behavioral1
Sample
WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/WebCrack4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/WebCrack4.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/superdic.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/superdic.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
readme.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
readme.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
下载王www.xzking.com.url
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
下载王www.xzking.com.url
Resource
win10v2004-20231215-en
General
-
Target
791cca1cf69da4ba7e118c2a91eb2d97
-
Size
967KB
-
MD5
791cca1cf69da4ba7e118c2a91eb2d97
-
SHA1
82a2f78159b7c15ee61ae5136e444647e3f45902
-
SHA256
e56afaf430e63ba2367446ebefb6356f1d04a0c7e10416d3851d8f43efe01a7e
-
SHA512
226f330d9f0923be542be355bda7c7689f5e1889a608ab0fc0c9fc43c619dab0ad2278ecb11c45d9d9d7086d74167adcf84f7e6d0d10d41acb551ddefbf54be9
-
SSDEEP
24576:6C+eSYlCKkg0PJoeyOucFstqViGiN6ifPznD2/Vw8dE:69f2gRHucFNoGiTfPv2/Vw8dE
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/WebCrack4.exe unpack001/WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/superdic.exe
Files
-
791cca1cf69da4ba7e118c2a91eb2d97.zip
-
WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/WebCrack4.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
WebCracker路由密码暴力破解工具 v4.0 绿色特别版下载/superdic.exe.exe windows:4 windows x86 arch:x86
e35ef8906df3944382a626158d3fb23d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
HeapSize
HeapReAlloc
VirtualFree
SetUnhandledExceptionFilter
GetEnvironmentStringsW
HeapCreate
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
HeapDestroy
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateProcess
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
FindFirstFileA
FindClose
LCMapStringW
LCMapStringA
LockFile
GlobalUnlock
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetDiskFreeSpaceExA
SetEndOfFile
UnlockFile
SetFilePointer
WriteFile
GetProfileStringA
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetLastError
GlobalFree
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
lstrcpynA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
VirtualAlloc
GetVolumeInformationA
user32
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
LoadStringA
GetSysColorBrush
GetDesktopWindow
GetClassNameA
WindowFromPoint
DestroyMenu
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
SetDlgItemTextA
GrayStringA
DrawTextA
BeginPaint
GetWindowDC
ClientToScreen
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
CharNextA
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
CopyAcceleratorTableA
GetNextDlgGroupItem
SetRect
TabbedTextOutA
EndPaint
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyIcon
GetDC
ReleaseDC
InflateRect
SetWindowLongA
PtInRect
ReleaseCapture
SetCapture
MessageBeep
IsIconic
GetSystemMetrics
DrawIcon
DeleteMenu
LoadCursorA
GetSystemMenu
EnableMenuItem
LoadIconA
EnableWindow
KillTimer
SetTimer
IsWindow
SendMessageA
SetCursor
GetClientRect
FillRect
OffsetRect
GetWindowRect
RedrawWindow
GetParent
InvalidateRect
UpdateWindow
GetSysColor
ScreenToClient
IsDialogMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
gdi32
SetTextAlign
GetDeviceCaps
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
IntersectClipRect
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
Rectangle
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetViewportOrgEx
SetViewportOrgEx
BitBlt
CreateSolidBrush
ScaleWindowExtEx
SetWindowExtEx
CreateFontIndirectA
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
shell32
ShellExecuteA
comctl32
ImageList_Destroy
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
Sections
.text Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
readme.url.url
-
下载王www.xzking.com.url.url