Behavioral task
behavioral1
Sample
百胜软件一键配置工具(直接双击运行).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
百胜软件一键配置工具(直接双击运行).exe
Resource
win10v2004-20230220-en
General
-
Target
百胜软件一键配置工具(直接双击运行).exe
-
Size
23KB
-
MD5
25af046c07f54fa33da129f1fa289741
-
SHA1
ead8cd94634c5cf0c5296a77201dd305ce9f0177
-
SHA256
1df8f320aff4b4d1749253c82b36cd0944d0f4ae0658b56ccd4449d15d7ff929
-
SHA512
d9a410670f20e185d7fe24e8c5524ee0be62d170ef40364e98b32bf70bf63661f11842b23c486990a288691d1093cf9e4da3ec9b461d1c6ebd2528f2bce0544f
-
SSDEEP
384:/bCEXMMADQIrUeNFwx9E5xtT6fkCMst8AdxIiv4dK8y8KG8szTO4Am7UnwtzwGI7:z1NAUsbxtT6sFst/3IrdlLUwMGnbcuyK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 百胜软件一键配置工具(直接双击运行).exe
Files
-
百胜软件一键配置工具(直接双击运行).exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE