Behavioral task
behavioral1
Sample
Ӳע.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Ӳע.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
˵.doc
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
˵.doc
Resource
win10v2004-20220901-en
General
-
Target
5f7b5e7005ec3375ecb6b6fb18471b84b35702a75fc691964a7587a0a2c2bce9
-
Size
2.4MB
-
MD5
23c3151fdeeb8eca4fbe339c3308b81c
-
SHA1
c65554514b07c0e9808273417d88ac3e3e539e49
-
SHA256
5f7b5e7005ec3375ecb6b6fb18471b84b35702a75fc691964a7587a0a2c2bce9
-
SHA512
fad14ca1211742557fca920ef2b108079048b223141561b70bc3d5061b3cfcb99bf13dcbdccb8363d3e4057c51ce3f56f0c6b12835079f146e94f86e85d859fa
-
SSDEEP
49152:mlUQQfqN/Gu3Txu6g3CwOeGw/xGHTuWmPH5yWgav1SvD/phhp/gjTh6z0H90:wURiN/PduNnLvxGpmfoWbyBhcnh6I2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Ӳע.exe upx
Files
-
5f7b5e7005ec3375ecb6b6fb18471b84b35702a75fc691964a7587a0a2c2bce9.zip
-
Ӳע.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
˵.doc.doc windows office2003