Static task
static1
Behavioral task
behavioral1
Sample
WIN7激活工具(赞).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
WIN7激活工具(赞).exe
Resource
win10v2004-20230220-en
General
-
Target
WIN7激活工具(赞).exe
-
Size
258KB
-
MD5
003c570b91ea3a2366b96b58014a7e3c
-
SHA1
9494e1a4388620804ffb36ae73b17ecaf295e9db
-
SHA256
c8a703e71fbeb9a0832bdeff12b5d7e098549807329b8e5e1276570b76350ad0
-
SHA512
f4abb97ab06bfb2c811ed1548c27c3ae902426846c3d3e327c03bc615782ed3bc434a27c510820fef0fd3ac036b1be98281c17a34da89b68035dd837f42c6512
-
SSDEEP
6144:aTfFDbRnOTNU/a+yn1JW+x/+kHmG2X2zL9X8nN5l87FxbQYt:I5OYabMdXAX8nN527Fxb/t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WIN7激活工具(赞).exe
Files
-
WIN7激活工具(赞).exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ