Static task
static1
Behavioral task
behavioral1
Sample
顺兴智能投注系统_广东快乐十分单方案.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
顺兴智能投注系统_广东快乐十分单方案.exe
Resource
win10v2004-20230220-en
General
-
Target
顺兴智能投注系统_广东快乐十分单方案.exe
-
Size
144KB
-
MD5
e12e9e927a446cd3cd3668da9dd50d36
-
SHA1
7f9edef7cba570fb1d60da661d4b2fa97f171475
-
SHA256
196c06e6837251a342b51ab7bb4115198dd9016bd8febd3b53960f9e6953257e
-
SHA512
0b0c8c4bd076b0afe4fbd90b23094825de51f13a321f9fdf95ebbad8f01f08127bccc4d77691a8f4d668fdb0779726e643bf3070f28c12fc21c567ba2d34089e
-
SSDEEP
1536:YLCEg86zAGNayPV8WBUoRuTdsl4yEg86zAGNayPV8WBUoRuTC:DhA7wD1QdJkhA7wD1QC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 顺兴智能投注系统_广东快乐十分单方案.exe
Files
-
顺兴智能投注系统_广东快乐十分单方案.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ