8d12c5b224efaa59d6a45a1b742117dea87ffc8f3e05a5bbff0ce68ab3899b7c
- SHA256 8d12c5b224efaa59d6a45a1b742117dea87ffc8f3e05a5bbff0ce68ab3899b7c
Overview
overview
5Static
static
3吾爱熄�...��.exe
windows10-2004-x64
1吾爱熄�...��.exe
windows11-ltsc_2024-x64
1吾爱熄�...��.exe
windows10-2004-x64
1吾爱熄�...��.exe
windows11-ltsc_2024-x64
5吾爱熄屏.exe
windows10-2004-x64
1吾爱熄屏.exe
windows11-ltsc_2024-x64
1吾爱熄�...��.exe
windows10-2004-x64
1吾爱熄�...��.exe
windows11-ltsc_2024-x64
1吾爱熄�...��.exe
windows10-2004-x64
1吾爱熄�...��.exe
windows11-ltsc_2024-x64
1吾爱熄�...��.exe
windows10-2004-x64
1吾爱熄�...��.exe
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
吾爱熄屏-一键休眠黑屏.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
吾爱熄屏-一键休眠黑屏.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
吾爱熄屏-一键锁屏熄屏.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
吾爱熄屏-一键锁屏熄屏.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
吾爱熄屏.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
吾爱熄屏.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
吾爱熄屏口令版A-纯黑窗不关屏.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
吾爱熄屏口令版A-纯黑窗不关屏.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
吾爱熄屏口令版B-现状DPMS全关.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
吾爱熄屏口令版B-现状DPMS全关.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
吾爱熄屏融合版.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
吾爱熄屏融合版.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target 8d12c5b224efaa59d6a45a1b742117dea87ffc8f3e05a5bbff0ce68ab3899b7c
- Size 52KB
- Sample260710-ex6dfses5z
- SHA256 8d12c5b224efaa59d6a45a1b742117dea87ffc8f3e05a5bbff0ce68ab3899b7c
- MD5 65241b83b20f0d370a5a8203e78b6c18
- SHA1 3788b3d4358f45effb793d9c93a43e4470c637ce
- SHA512 5ac9462cb6fbf7bad31d9f35dd1c9264db1a26a2fc952d9bad27688740cdc83d067c090255fc5e310b1f30258b19bc1f2a6ebe3f833360e03cb4ba282a440222
- SSDEEP 1536:TZsmw+okt3jgJj1imv8ynlUB07l1+TfS/rvZ6FfxjAs:amtja8ynkCYTKZ6RJj
- TLSH T1E933027F607F868CD6175235B6D69B677436C18E25E832493720C1A3A47B89DEF33920
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/吾爱熄屏-一键休眠黑屏.exe unpack001/吾爱熄屏-一键锁屏熄屏.exe unpack001/吾爱熄屏.exe unpack001/吾爱熄屏口令版A-纯黑窗不关屏.exe unpack001/吾爱熄屏口令版B-现状DPMS全关.exe unpack001/吾爱熄屏融合版.exe
File Explorer
-
8d12c5b224efaa59d6a45a1b742117dea87ffc8f3e05a5bbff0ce68ab3899b7c.zip 52KB
-
README.md2KB
-
吾爱熄屏-一键休眠黑屏.exe.exe 5KB
-
吾爱熄屏-一键锁屏熄屏.exe.exe 4KB
-
吾爱熄屏.exe.exe 9KB
-
吾爱熄屏口令版A-纯黑窗不关屏.exe.exe 24KB
-
吾爱熄屏口令版B-现状DPMS全关.exe.exe 24KB
-
吾爱熄屏融合版.exe.exe 34KB
README.md
- SHA256 c3b7e8832cd6694f7de837bbf81e69474febf69f1ec2f157c2b765f7e442ab9b
- MD5 9fd756a5106c0673ce6688064bba8c8d
- SHA1 664623afbb66edd44ca6db753754623bca82b53b
- SHA512 cd575ee4d9f96c3996e722bc151c9aaabcd76f59c945c7c86587f336fa4905521748097e3f305c5f9fcdbe446ccb857e0862979f6bf1b095c6d0e784bea1c534
- TLSH T11651C5E316182CAD4750644375C4BC8FE323536C9AF74058D4B69254A04CABAC6FB86E
- MD5 SHA1 SHA512 TLSH
吾爱熄屏-一键休眠黑屏.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 30fb2d0d191fd984fdc9e158aa31fcca80d0a57494b05eb3c25949fd0b9c19b2
- MD5 57ee8bbdb01668a5122b5b0ccb792f56
- SHA1 cdef8005d2f77767fc0a82a6f72fe2ae166bf342
- SHA512 98a1209f0d0e6c73cbc190320f8fe4b46905cac7df23fed966d768cae17acc18112e92ab502fefba81f16254d84ffe743ab6c85c81dc8935302273fbca84884a
- SSDEEP 48:6U2z1FifC1y9g8PuJx4l9euull92q/Jq/v3debJT2RwSfbNtm:AzXiqQa8PV0H9LgN6JwzNt
- TLSH T117B1C513D3E84637E0B247B22EF38311B2B4E6515E771B9FB89802196D157441D23BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
吾爱熄屏-一键锁屏熄屏.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 dff29b6659f94422c9ad37ebcb9e2f7d149ba891cbdc4fde72fa42383edc8def
- MD5 6b89c3e7c0bf6bae7502c1b42c77a881
- SHA1 5c5cccb7f6377a977c6fbe893db569fb9b4783d8
- SHA512 dbcdf29087482f78481f6d104f59b40fec9410374f0493f5a7701ee00600480d78882cf61e4b8db68ce34238dc5477796733ff9af77c03eb8503616b4df78995
- SSDEEP 48:6Wc63NeFTioBuJYbP688OuulGG9WFqvOYUQWrkEf4iII8SfbNtm:463UTioBTD6b4UG9WYOYUQWn4bIZzNt
- TLSH T1CB91E903D3C8467BE07643721DF387357BF9E2656AA7539F2D5802267D297500D23A71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
吾爱熄屏.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 006ae4543c7c3bb227ec5e6bd3cc7419c3eb1d379dfdced7b20344734d470c7d
- MD5 9112b08e0b6a1f7b10b9d6eb41f819a0
- SHA1 13480d4c73ca7dd2298d8a47138591414528eaaf
- SHA512 01f3c870d226e31c64c5aece3f1399b3df58a5906ee292c911dc3460b5bb06551a406e9b2f544342d857a142a4156d083689b398cad491d2869df5ea31e42d4c
- SSDEEP 192:H2ClXmXDmhteD3ND0WayxELmorJqUgOS:tlXmXihtk3OW+tJqU
- TLSH T129121917E7D84123CDEE2F7D3B9747111334E6A16A57FB9F689811BA3A063900A43BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
吾爱熄屏口令版A-纯黑窗不关屏.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4d846fb285b2fc66174ac5db3660015ee638192e66dd76e933dc714a03feae8a
- MD5 20664c76aa0eab5f17180bf87d8d62a5
- SHA1 b5ecbae135f1949cd0692b1f9641ef25840b4ce1
- SHA512 1bff5f929ca1afcb77ac289fe7dd56bb1e6db660fd66d86658f8f7559703df87a09051905cbb10f7c484d1847cef79bec31fedafe4310009bf819f69f5553afd
- SSDEEP 384:VRDWW2GcwM9NBF2ruBneufHxZ9oDCOtabUt9WMj96suD0O66rK7g:VRDWW2wONH2rupeufRZ9oDRhXWY6znG7
- TLSH T190B25C06A258821FC9AE1FBD15A3255223B0F6A37733EB5D6CDA509E665B3F043013DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
吾爱熄屏口令版B-现状DPMS全关.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 229a5c92c70b0a2bc30097180be1737bfd41f1a5d73ca1833601b5a037292c7b
- MD5 d2f752a0c9459372cc4bc47d3291a36f
- SHA1 202e13f2223d72a8af111382f502f701dc60ddb9
- SHA512 a2fbdf0d94813bf7aa51c97ff9f7bdc0f12b35b33b5ec4fe2825c66f85515d8683b2cbc6864c77911cf32eceeb900357a367bef4b0bfac07920ddf0d06133348
- SSDEEP 384:hRDyW2GcwM9NBF27xiU0+w67SaxvktabUt9WMj96syD0OswnKPf:hRDyW2wONH2ldRp7Sa1khXWY6z3KP
- TLSH T18BB28E04B258822FC99E1FBD51A3268123B1F6926737EB4D6CDA10DE2A5B7B017403DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
吾爱熄屏融合版.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7f9c284ffe0e8bbca7c38aeadc179ad48ea700924103bd16aaac2f56be06ec86
- MD5 255bf06c66ded3d5403751a959a79821
- SHA1 9000c8e5ad64376ce3a755ca00de540f9c83d890
- SHA512 82d82109b3e7d69dc9843ec2e358315cf63b978b58c114b81021f97ff2c7fbbf3abacecccb71de8fad0971b915d5514b738d927863bc48b70ae43fff545b9922
- SSDEEP 768:Pmi5nT4lVwuY4Oa8FyQ3nJKmhXWY6EE7yZwdx9C:Pmi5TIqFP8UnJVhXWY2yZwdx9C
- TLSH T12AF24C887256C72FC6BF47FE6162711523B1C9A33923F7980CDA21EA1877BE04A05797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
39438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ