Behavioral task
behavioral1
Sample
office����.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
office����.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Զ�̷���.url
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
Զ�̷���.url
Resource
win10v2004-20240508-en
General
-
Target
893c567f344409be86ee9ab8b6220e3e92d25318f542c8ac34a5db2b3b4d10cb
-
Size
692KB
-
MD5
e13b09417f7ecd306244f864bad711ba
-
SHA1
173d3bb9c5d0280312670a41557a208b30508d22
-
SHA256
893c567f344409be86ee9ab8b6220e3e92d25318f542c8ac34a5db2b3b4d10cb
-
SHA512
c26e035bddba3e8086dd270c75aeead2870ed7cdd982e1e07b757bf25d1a8e2f86a9f479a4c0969286922498c44b39f225b9fe58b3f33ce15dd61f100730151b
-
SSDEEP
12288:kSsllPWNkxMLL/1H7phjT5dMaE7HVzDZDDralytOe5xOn4wOqRqDNBcD:X2Mv9bHjQD1ZeTe5lwOqRqp8
Malware Config
Signatures
Files
-
893c567f344409be86ee9ab8b6220e3e92d25318f542c8ac34a5db2b3b4d10cb.zip
-
office����.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
q h)TD/ Size: 515KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
��װ����.txt
-
��װ������ȡ.jpg.jpg
-
http://weixin.qq.com/r/tS-x6dzEI4FcrZiK93qn
-
-
Զ�̷���.url.url