Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7我爱记�...Ps.dll
windows7-x64
1我爱记�...Ps.dll
windows10-2004-x64
1我爱记�...fo.dll
windows7-x64
3我爱记�...fo.dll
windows10-2004-x64
3我爱记�...��.exe
windows7-x64
7我爱记�...��.exe
windows10-2004-x64
1我爱记�...��.exe
windows7-x64
7我爱记�...��.exe
windows10-2004-x64
7我爱记�...��.exe
windows7-x64
1我爱记�...��.exe
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 19:32
Behavioral task
behavioral1
Sample
我爱记牌器/ComPs.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
我爱记牌器/ComPs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
我爱记牌器/VerInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
我爱记牌器/VerInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
我爱记牌器/去后台链接补丁.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
我爱记牌器/去后台链接补丁.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
我爱记牌器/我爱记牌器.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
我爱记牌器/我爱记牌器.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
我爱记牌器/我爱记牌器自动升级.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
我爱记牌器/我爱记牌器自动升级.exe
Resource
win10v2004-20240611-en
General
-
Target
我爱记牌器/我爱记牌器.exe
-
Size
222KB
-
MD5
594f54e80b61518c2318d85f8d4f706c
-
SHA1
d4c49de5a90d37ba29fb694408f27457cfff30b5
-
SHA256
c6fad6d57c66d05f27e39aabfbe0c888990bf454c5b4dc0c4e73633c84b272c9
-
SHA512
9ecd30336f61531d3d6c198fc111290d6a7c972ba9cb4941f81d09e67b1d79e5d5aa9d2078393e786d345fb700a3da5c509eaafae779b2820a1f006b06d3fa66
-
SSDEEP
3072:nmM2zwtNZWfxK6pwCOXkaz5HfdilGC02C/0DEWcKKufR9H4CjRvpQEb9fNiLTq:nmtfcutatlKGCzxDxMufR9HLjvb9f1
Malware Config
Signatures
-
resource yara_rule behavioral8/memory/4864-0-0x0000000000400000-0x00000000004A7DF0-memory.dmp aspack_v212_v242 behavioral8/memory/4864-1-0x0000000000400000-0x00000000004A7DF0-memory.dmp aspack_v212_v242 behavioral8/memory/4864-3-0x0000000000400000-0x00000000004A7DF0-memory.dmp aspack_v212_v242 behavioral8/memory/4864-4-0x0000000000400000-0x00000000004A7DF0-memory.dmp aspack_v212_v242