Static task
static1
Behavioral task
behavioral1
Sample
CF蜗牛透视稳定版0107.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CF蜗牛透视稳定版0107.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
西西游戏网.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
西西游戏网.url
Resource
win10v2004-20240226-en
General
-
Target
d370ff6d847b2be19e0a75e423d64bc2
-
Size
1.5MB
-
MD5
d370ff6d847b2be19e0a75e423d64bc2
-
SHA1
49b3d02cc75cbad9d27fe93acfeed5df7cb5b1d5
-
SHA256
61d2e95f7b63d8a0bd6a51ea8633ff3f4027859afdd3e6ca62ee92e714fb6804
-
SHA512
2d9268172e79eb2f36d229004b1495f1da1d3b46f6dc478d1175f0da3826672fadd7f102713e1581b7dded4612b3bddd65ff85a397fec7dca3bff1fb92fb9e05
-
SSDEEP
24576:gS4bQwhCI7yT/cm4y6+efnfkOAIele8jUS77ZGD8uigPvAd0gni5bGg7jmWKOoiG:gl3zmr6+KMlx7FGDJPgznEbnjm3bv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CF蜗牛透视稳定版0107.exe
Files
-
d370ff6d847b2be19e0a75e423d64bc2.rar
-
CF蜗牛透视稳定版0107.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 868KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zoanjjyw Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crddpsub Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
西西下载说明.txt
-
西西游戏网.url