Static task
static1
Behavioral task
behavioral1
Sample
热情如火的女警不雅视频后入爆插逼流出完整版ī.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
热情如火的女警不雅视频后入爆插逼流出完整版ī.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
热情如火的女警不雅视频后入爆插逼流出完整版ī.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral4
Sample
热情如火的女警不雅视频后入爆插逼流出完整版ī.exe
Resource
win11-20240611-en
General
-
Target
热情如火的女警不雅视频后入爆插逼流出完整版ī.exe
-
Size
1.4MB
-
MD5
d7f2524ac7499f019cd263952badc0d0
-
SHA1
12fe97bfe1b6f37db0e3b185f65285475702e76e
-
SHA256
b3f6759aea5339ce3cd0c60f4423f52969ea647cf5b661196b588676b71e3ffb
-
SHA512
4a5bd7237f634caddc1eb41a75d780e83e9df6561ce8b089933352adf8a06e3c48048e0e97cc71cad41ec645019691220a5518ce270a30f50530dc42bafc17a9
-
SSDEEP
24576:sogcNCYmiZQma95KisCrPoOjm4WPHZ5I6Cmd6qKIa1l:BYYmiZQv0iNrM9HO1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 热情如火的女警不雅视频后入爆插逼流出完整版ī.exe
Files
-
热情如火的女警不雅视频后入爆插逼流出完整版ī.exe.exe windows:6 windows x86 arch:x86
a0037062bfd98c19f3e57297dc15ac41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToTzSpecificLocalTime
GetTickCount64
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
CreateFileW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
SetStdHandle
SetEnvironmentVariableW
GetFileSizeEx
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
CompareStringW
GetFileType
GetStdHandle
HeapQueryInformation
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
RaiseException
OutputDebugStringW
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetCPInfo
GetOEMCP
VirtualProtect
FileTimeToSystemTime
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
WriteFile
GetFileTime
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GetThreadLocale
DeleteFileA
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
GetCurrentProcessId
GlobalAddAtomA
CloseHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FindResourceA
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExA
GetCurrentThreadId
GetCurrentThread
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetACP
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
SetFileAttributesA
lstrlenA
GetModuleFileNameA
ExitProcess
Sleep
GetModuleHandleA
GetProcAddress
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
HeapFree
WriteConsoleW
user32
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetMonitorInfoA
MonitorFromWindow
WinHelpA
LoadIconW
LoadIconA
UnhookWindowsHookEx
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollPos
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
ReleaseDC
BeginDeferWindowPos
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
CopyRect
GetSysColor
DestroyMenu
GetLastActivePopup
GetWindowThreadProcessId
UnregisterClassA
SendMessageA
MessageBoxA
SetCursor
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
KillTimer
ClientToScreen
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
DeferWindowPos
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetParent
GetSubMenu
GetMenuItemID
GetMenuItemCount
PostMessageA
PostQuitMessage
SetWindowPos
SetWindowContextHelpId
GetWindow
MapDialogRect
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
GetFocus
SetWindowTextA
IsDialogMessageA
GetSysColorBrush
LoadCursorA
SetCapture
ReleaseCapture
RealChildWindowFromPoint
PostThreadMessageA
RegisterClipboardFormatA
CharUpperA
MessageBeep
GetNextDlgGroupItem
SetTimer
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
InvalidateRect
IsRectEmpty
gdi32
Escape
GetClipBox
GetStockObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectObject
SetMapMode
DeleteObject
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SetTextColor
SetBkColor
ExtTextOutA
GetObjectA
CreateBitmap
GetDeviceCaps
DeleteDC
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegDeleteValueA
RegSetValueExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
ole32
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CoFreeUnusedLibraries
CoCreateGuid
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleUninitialize
CLSIDFromString
oleaut32
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantCopy
oledlg
ord8
oleacc
CreateStdAccessibleObject
LresultFromObject
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ