Behavioral task
behavioral1
Sample
ͬ/ͬ.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ͬ/ͬ.exe
Resource
win10v2004-20221111-en
General
-
Target
99412785a86f8a7200ed788a3c4d911b7788baaa116a238b1e0bf8ba76a2e6b8
-
Size
387KB
-
MD5
afc20713f6309be724359a79c3031bd2
-
SHA1
148ebc8a285d965601c3f86a35944c3ebd172163
-
SHA256
99412785a86f8a7200ed788a3c4d911b7788baaa116a238b1e0bf8ba76a2e6b8
-
SHA512
39db05920419fc300350ddd527c292c976895173d3ed3d797efd29f3742e698c042090acf8e44bc9d0d65ac5f89746f2413e1ad645db4db1fe515e5fa2096f91
-
SSDEEP
12288:Rvdf2PKxeF7cAHuE40meKmPHER+cdbsd3OXKJg:LuSsF7cBEPLKmPHB0U3OaJg
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ͬ/ͬ.exe upx
Files
-
99412785a86f8a7200ed788a3c4d911b7788baaa116a238b1e0bf8ba76a2e6b8.zip
-
ͬ/ʹǰȿ.txt
-
ͬ/ͬ.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 676KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 383KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE