Static task
static1
Behavioral task
behavioral1
Sample
G80U中文版设置工具.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
G80U中文版设置工具.exe
Resource
win10v2004-20230915-en
General
-
Target
G80U中文版设置工具.exe
-
Size
465KB
-
MD5
dbc73a0bb2c8133a304be5eadc711232
-
SHA1
0676932b62f3df2cab92aee3d9862b9a7d3a0a8d
-
SHA256
8351d02ab12ca6d54fcad701af86c6d2a4dedf1361ab79dd65bf1f33e866cf40
-
SHA512
4ef805f8b96b03341cf20a60feb44ee4b83db58924d3a5bed5663260673ef21dbc6576fb76142cc3cb2d9c363374e3fbfb75769c7d05892a12659d33fbbf4658
-
SSDEEP
6144:UsgvbGXjgoge4BgbRH/nEj2HCO0CwaC2q:UTGXpm4HPEj2k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource G80U中文版设置工具.exe
Files
-
G80U中文版设置工具.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 393KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ