Static task
static1
Behavioral task
behavioral1
Sample
任意整数转换(超级版).exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
任意整数转换(超级版).exe
Resource
win10v2004-20230915-en
General
-
Target
任意整数转换(超级版).exe
-
Size
200KB
-
MD5
d32e0a375a5e8ae692e017cfa5559a81
-
SHA1
10625c57a38c890effdbd32583d1ea17e8a317d4
-
SHA256
dd421e6388d8ba59a83f1f3ea19c7514674e34aaec31887e0f60fb57978d7faf
-
SHA512
01f75141e0a653526a83ebb36fd24bef92caf00231e9e9577cb4b9a0bf3ff764c82f79b1c0fd51ca8c21ace5be22962a6615d0e999d286145c6a0fdd174e8d37
-
SSDEEP
1536:78FOlwMChRN72823tiblrbTg0sxRS4kcfFsbQjqYjhJWoOR:oFOlFu7rLlrb0P1kc6QjqYjWo4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 任意整数转换(超级版).exe
Files
-
任意整数转换(超级版).exe.exe windows x86
68195fc31fad0a48d66b60a3e39912df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
MultiByteToWideChar
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetLastError
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
RaiseException
GetStringTypeA
GetStringTypeW
ReadFile
FlushFileBuffers
SetFilePointer
LCMapStringA
LCMapStringW
CloseHandle
SetStdHandle
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ