Static task
static1
Behavioral task
behavioral1
Sample
蕉太狼FP网吧家庭兼容版.exe
Resource
win7-20230712-en
General
-
Target
蕉太狼FP网吧家庭兼容版.exe
-
Size
287KB
-
MD5
e2327c41f028a27ff2b0b56ad44513e7
-
SHA1
17d5fcaadae8e7f8367d271a9f08b00c9749486d
-
SHA256
2e2c277c5af82018704c32d6894c2e196d6fc16099a19cb1510347c39b583618
-
SHA512
42c00af003cfee2503b7dba540e9ee37c7e9bf87a6cc8aa3b34597d98c8124956ab72cd211082b2152ffc5d008a27bb6116e87b3837cabe10a27ac914db580bc
-
SSDEEP
6144:5t+XPyDnQVrVmrBEDBWEHVQQGGkKwJnAiXtUjP17wOg/GNlu+XheAUUXL:5trDn+sEDUE1lGG3iXtu7Bg+DXXnUCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 蕉太狼FP网吧家庭兼容版.exe
Files
-
蕉太狼FP网吧家庭兼容版.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 268KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE