Static task
static1
Behavioral task
behavioral1
Sample
端口扫描.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
端口扫描.exe
Resource
win10v2004-20230220-en
General
-
Target
端口扫描.exe
-
Size
46KB
-
MD5
36c6f6fee875b519a81284fafb3e41b1
-
SHA1
a08dcf0e92c8c27d8056d925d40d3ae2995585fe
-
SHA256
6f83e3f9c38108dbea18ae72954c4157520eb105ead4182f4c863574cce824e1
-
SHA512
72827139c13f2f5e6adbf9ecb15ea87606db934416fa0ced61d0c0306bf8c833f6482304329ae479d9e62c8c2294a0fa8829d41323d7d8bb1eb709676e9cd589
-
SSDEEP
768:7rgEBSg0ylb/G1qm5S6LeWnENCz5/Gio2+ebavyUnA:7rOg5lbGkm5VL1ENwZVo2+dy+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 端口扫描.exe
Files
-
端口扫描.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BAO0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BAO1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE