Static task
static1
Behavioral task
behavioral1
Sample
qqview/QQ聊天记录查看软件.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
qqview/QQ聊天记录查看软件.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
qqview/txd.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
qqview/txd.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
qqview/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
qqview/新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
7e1e620df8253df1b7bd004f0c364569
-
Size
429KB
-
MD5
7e1e620df8253df1b7bd004f0c364569
-
SHA1
6d13a28e6854db29de90efe64ddc91acab2d55b7
-
SHA256
0c3f8af6383e19deba2d45d242a6abc811f74dbad0c1b5424619df42fe9d5602
-
SHA512
273f255304579ff1980887ac201ee7dd6f593d738336dffced7ff680829bb49e4041ea218b2e26bc490a364aa499f6b1ef9013ebe4659f4cb7c317277d3f033b
-
SSDEEP
12288:y7Obg78bdY3yRnnKVR7Yhnz8RWgEDizXle:y7E880R7ynYogLzXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/qqview/QQ聊天记录查看软件.exe
Files
-
7e1e620df8253df1b7bd004f0c364569.rar
-
qqview/QQ聊天记录查看软件.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 19KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 415KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
qqview/txd.dll
-
qqview/新云软件.url.url
-
qqview/软件简介.txt