Static task
static1
Behavioral task
behavioral1
Sample
iRoundPic_3.8.8_gb/iRoundPic.chm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
iRoundPic_3.8.8_gb/iRoundPic.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
iRoundPic_3.8.8_gb/iRoundPic.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
iRoundPic_3.8.8_gb/iRoundPic.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
iRoundPic_3.8.8_gb/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
iRoundPic_3.8.8_gb/新云软件.url
Resource
win10v2004-20231222-en
General
-
Target
7c6e22b68167e19a2ccb57798250182e
-
Size
7.1MB
-
MD5
7c6e22b68167e19a2ccb57798250182e
-
SHA1
ad93ce55e97a8da34fc076db5f0356b860045616
-
SHA256
2582e68d423d12beef27fd0f57ce869095953c53bc1d635e09ce003af9ac2346
-
SHA512
3cdb7fc83851686da240cc2b3f874e51390be6566efe0e4203d26c0dc7c3acbb055a6348463d67eeae5fb9b9f36cd120c824b4cd6862cf4a07eaf9d45a183efa
-
SSDEEP
196608:GXo6ILS1pw5f1hZxq1QC5g+LnlUvZZT0QVluUUjOn5S:jOw5f19q1QGnlUvXhPuw5S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/iRoundPic_3.8.8_gb/iRoundPic.exe
Files
-
7c6e22b68167e19a2ccb57798250182e.rar
-
iRoundPic_3.8.8_gb/Mask/Mask_02.png.png
-
iRoundPic_3.8.8_gb/Mask/Mask_19.png.png
-
iRoundPic_3.8.8_gb/Mask/Mask_24.png.png
-
iRoundPic_3.8.8_gb/Mask/Mask_25.png.png
-
iRoundPic_3.8.8_gb/Mask/Mask_26.png.png
-
iRoundPic_3.8.8_gb/Mask/gifframe_276.gif.gif
-
iRoundPic_3.8.8_gb/Mask/gifframe_290.gif.gif
-
iRoundPic_3.8.8_gb/Mask/gifframe_307.gif.gif
-
iRoundPic_3.8.8_gb/Mask/圣诞快乐_01.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/圣诞快乐_01.spz
-
iRoundPic_3.8.8_gb/Mask/恭贺新春.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/恭贺新春.spz
-
iRoundPic_3.8.8_gb/Mask/招财进宝.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/招财进宝.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_ELLE.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_ELLE.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_HOW.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_HOW.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_名牌.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_名牌.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_名车志.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_名车志.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_忽然一周.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_忽然一周.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_摄影之友.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_摄影之友.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_新周刊.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_新周刊.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_时尚健康.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_时尚健康.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_男人装.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_男人装.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_都市丽人.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_都市丽人.spz
-
iRoundPic_3.8.8_gb/Mask/杂志_青春.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/杂志_青春.spz
-
iRoundPic_3.8.8_gb/Mask/相片边框_Memory2009.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/相片边框_Memory2009.spz
-
iRoundPic_3.8.8_gb/Mask/相片边框_我们的爱.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/相片边框_我们的爱.spz
-
iRoundPic_3.8.8_gb/Mask/相片边框_爱惜.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/相片边框_爱惜.spz
-
iRoundPic_3.8.8_gb/Mask/福.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/福.spz
-
iRoundPic_3.8.8_gb/Mask/贺年.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/贺年.spz
-
iRoundPic_3.8.8_gb/Mask/边框_01.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_01.spz
-
iRoundPic_3.8.8_gb/Mask/边框_03.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_03.spz
-
iRoundPic_3.8.8_gb/Mask/边框_04.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_04.spz
-
iRoundPic_3.8.8_gb/Mask/边框_05.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_05.spz
-
iRoundPic_3.8.8_gb/Mask/边框_07.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_07.spz
-
iRoundPic_3.8.8_gb/Mask/边框_09.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_09.spz
-
iRoundPic_3.8.8_gb/Mask/边框_10.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_10.spz
-
iRoundPic_3.8.8_gb/Mask/边框_17.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_17.spz
-
iRoundPic_3.8.8_gb/Mask/边框_18.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_18.spz
-
iRoundPic_3.8.8_gb/Mask/边框_21.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_21.spz
-
iRoundPic_3.8.8_gb/Mask/边框_22.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_22.spz
-
iRoundPic_3.8.8_gb/Mask/边框_24.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_24.spz
-
iRoundPic_3.8.8_gb/Mask/边框_26.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_26.spz
-
iRoundPic_3.8.8_gb/Mask/边框_27.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_27.spz
-
iRoundPic_3.8.8_gb/Mask/边框_29.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_29.spz
-
iRoundPic_3.8.8_gb/Mask/边框_30.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_30.spz
-
iRoundPic_3.8.8_gb/Mask/边框_31.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_31.spz
-
iRoundPic_3.8.8_gb/Mask/边框_32.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_32.spz
-
iRoundPic_3.8.8_gb/Mask/边框_33.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_33.spz
-
iRoundPic_3.8.8_gb/Mask/边框_34.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_34.spz
-
iRoundPic_3.8.8_gb/Mask/边框_35.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_35.spz
-
iRoundPic_3.8.8_gb/Mask/边框_39.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_39.spz
-
iRoundPic_3.8.8_gb/Mask/边框_41.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_41.spz
-
iRoundPic_3.8.8_gb/Mask/边框_42.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/边框_42.spz
-
iRoundPic_3.8.8_gb/Mask/邮票边框_01.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/邮票边框_01.spz
-
iRoundPic_3.8.8_gb/Mask/邮票边框_02.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/邮票边框_02.spz
-
iRoundPic_3.8.8_gb/Mask/邮票边框_03.jpg.jpg
-
iRoundPic_3.8.8_gb/Mask/邮票边框_03.spz
-
iRoundPic_3.8.8_gb/Readme.txt
-
iRoundPic_3.8.8_gb/faq.txt
-
iRoundPic_3.8.8_gb/iRoundPic.chm.chm
-
iRoundPic_3.8.8_gb/iRoundPic.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 780KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
iRoundPic_3.8.8_gb/iRoundPic.lic
-
iRoundPic_3.8.8_gb/update.txt
-
iRoundPic_3.8.8_gb/新云软件.url.url