Behavioral task
behavioral1
Sample
˵˵ɾ.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
˵˵ɾ.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
ɾѶ棩.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
ɾѶ棩.exe
Resource
win10v2004-20221111-en
General
-
Target
5e95f5b19b3caa321baf8aedb8b3f039bbfd535948b677d8c486ff144ce19492
-
Size
1.0MB
-
MD5
758a66a556a1c282a46b564e20201c8f
-
SHA1
e93e1ddb43245112c6cb8c42ba9b4ac3bf287283
-
SHA256
5e95f5b19b3caa321baf8aedb8b3f039bbfd535948b677d8c486ff144ce19492
-
SHA512
925f10e283d91c4099a280f5f3dceef28a862f1e0f6bdf59a97e82cd2d451b68def613163eba73bd15686ec9fcdb6077b31a213eda75bdc57f8de9432fb87528
-
SSDEEP
24576:qPESDPUiiWTzF6212tNZDQstoi9+2Zlnqunve2U78fOy1YRC7I5Q1JxCrx:YEhK1At3n9ppRUofPYR9udE
Malware Config
Signatures
-
resource yara_rule static1/unpack001/˵˵ɾ.exe upx static1/unpack001/ɾѶ棩.exe upx
Files
-
5e95f5b19b3caa321baf8aedb8b3f039bbfd535948b677d8c486ff144ce19492.zip
-
˵˵ɾ.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ffblog Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ɾѶ棩.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1020KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 728KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE