Static task
static1
Behavioral task
behavioral1
Sample
采花大盗3.71_去广告_By_Loading/chdd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
采花大盗3.71_去广告_By_Loading/chdd.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
采花大盗3.71_去广告_By_Loading/采花大盗3.71 去广告 By Loading.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
采花大盗3.71_去广告_By_Loading/采花大盗3.71 去广告 By Loading.exe
Resource
win10v2004-20231215-en
General
-
Target
971c7798674f79488dd63b163439cd2a
-
Size
621KB
-
MD5
971c7798674f79488dd63b163439cd2a
-
SHA1
95e4b4ec4e10d962386c192c4764349b2a742da6
-
SHA256
14de1771efab40e7d04ca560d74c343929ed5f7fc8ec958b5e504bb43f079469
-
SHA512
c033f3119a1d9a6e6fc9d49969ecf7ed029949b266ad7a79cb9122abffe3a889a1e14fbec9ac6e33ed0a7c3d0e4496d8b4f5dfbf70e2a6b23daeade8304c5aef
-
SSDEEP
12288:/n7NXU+sYigGw5e5/eFdG7xdRsdn5u2hf42xgDX2DuIve6if0puUoAaRsioS5ayn:P75/Fg3ag2u2xgDmDuIv6UoAaRMSr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/采花大盗3.71_去广告_By_Loading/采花大盗3.71 去广告 By Loading.exe
Files
-
971c7798674f79488dd63b163439cd2a.rar
-
采花大盗3.71_去广告_By_Loading/chdd.dll
-
采花大盗3.71_去广告_By_Loading/chdd.ini
-
采花大盗3.71_去广告_By_Loading/contentConfig.xml
-
采花大盗3.71_去广告_By_Loading/采花大盗3.71 去广告 By Loading.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE