Behavioral task
behavioral1
Sample
ReIcon-v1.7 桌面图标排列备份恢复(首选)/ReIcon_x64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ReIcon-v1.7 桌面图标排列备份恢复(首选)/ReIcon_x64.exe
Resource
win10v2004-20220812-en
General
-
Target
994bc9a46e201e24df73b6df9faa704f9c2071103e754c0999f0701a800ad9f4
-
Size
513KB
-
MD5
543e869f89f8d1ed989ee5e64a1c7d43
-
SHA1
ae047606d64b5e0aa47d9fe873f643d447139f80
-
SHA256
994bc9a46e201e24df73b6df9faa704f9c2071103e754c0999f0701a800ad9f4
-
SHA512
9cb12db8d524f8418ba961e67acfbdf7459c86d3032fc8a6f64e6be371cd17f9d469dc5dd04f107a9c0f3d93aab0b8f56d40ed28e06af8a074b4d28f1a7e71a2
-
SSDEEP
12288:3MfujSzo8jBFmaxUn9gmd9sWMgRFmCYuA/PTx4tsrGsfR:3Dr87nUn9gmz37A/PeCGY
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ReIcon-v1.7 桌面图标排列备份恢复(首选)/ReIcon_x64.exe upx
Files
-
994bc9a46e201e24df73b6df9faa704f9c2071103e754c0999f0701a800ad9f4.rar
-
ReIcon-v1.7 桌面图标排列备份恢复(首选)/IconLayouts.ini
-
ReIcon-v1.7 桌面图标排列备份恢复(首选)/ReIcon.ini
-
ReIcon-v1.7 桌面图标排列备份恢复(首选)/ReIcon_x64.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 599KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ