Behavioral task
behavioral1
Sample
m3u8视频.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
m3u8视频.exe
Resource
win10v2004-20230915-en
General
-
Target
52afd652d434d428be571f4cd11006738dc258e14dd695ecbb7cd463ebe5a951
-
Size
125KB
-
MD5
b402369670e4b1fb039ef65d47dee542
-
SHA1
58f3db89c4f43ae94e605e126928eb980bce81dd
-
SHA256
52afd652d434d428be571f4cd11006738dc258e14dd695ecbb7cd463ebe5a951
-
SHA512
09877a387133242812e54cf98db4566669d274c278d906e5148f099f0e9e691cc1e42e63cba6f72ee00cf2987980d000b9cd613ca4ccbc77fb2faf86e4bed426
-
SSDEEP
3072:qGGl4FA3z/ixxs+I2Ndzc1Avz69lomxmeNPr8rcgM:qGGl49s+fbc1Avz6YuYdM
Malware Config
Signatures
-
resource yara_rule static1/unpack001/m3u8视频.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/m3u8视频.exe
Files
-
52afd652d434d428be571f4cd11006738dc258e14dd695ecbb7cd463ebe5a951.zip
-
m3u8视频.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 684KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE