Static task
static1
Behavioral task
behavioral1
Sample
屏幕录像机(oCam)500.0单文件特别版.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
屏幕录像机(oCam)500.0单文件特别版.exe
Resource
win10v2004-20230831-en
General
-
Target
屏幕录像机(oCam)500.0单文件特别版.exe.zip
-
Size
11.6MB
-
MD5
e367a86022ee90a417b3296ea2b97d66
-
SHA1
b8f4324b71b238e44f17b1bf87b6f957b1c41a9d
-
SHA256
41787e6a81fdedd0cc47955c8baedbb6a6d5fafb845bf10a4535e69d2d43114e
-
SHA512
dfe22a4cbd22c3cf4e7a1e727b0e10f5c3e59c4ba33451592a7c9aea95611e6f329d985c01a25c9f395bb90ce0510a8fde303bc53cf85088446fe9e6c6098a5a
-
SSDEEP
196608:9eoVYABqwFIhnQBu/fXeVJk/WJRYEEQjYOh/+Bk/MAW9T1+rxnRTePtLmKggOP:IoJBqwcQM/YGWJdEeYONmd9T1sxRTkm/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/屏幕录像机(oCam)500.0单文件特别版.exe
Files
-
屏幕录像机(oCam)500.0单文件特别版.exe.zip.zip
Password: infected
-
屏幕录像机(oCam)500.0单文件特别版.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10.0MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ