Static task
static1
Behavioral task
behavioral1
Sample
教程图文.exe
Resource
win7-20231023-en
General
-
Target
教程图文.exe
-
Size
2.6MB
-
MD5
b1275b085e9a09ef23673dc0d701b18c
-
SHA1
df1e9fcba23b8e25bc8bf4c00366adabed34acd1
-
SHA256
51f2211c860f9a23173d9c2533343e5386599846b32468922926239c62b2aecf
-
SHA512
3ce59741ffc61cc573dde7a848f72017e9c2aa5235660d4270852ed477ad4b8ff9da51949555530fe5d7aaa91f33cafce8f11e3f49407d84e32d1eabc7525ecc
-
SSDEEP
49152:8Qp+0ntZjhtAip4sT0VEWUAxQ8AOhxvoZSWzWAlrT3L1zTsQq3a3AqGV7dk4TknY:A0XjhtAipIVEWUAxQchxKWsf1H2K3FkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 教程图文.exe
Files
-
教程图文.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 4.9MB
IMAGE_SCN_MEM_READ
VProtect Size: 352KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 62KB - Virtual size: 64KB
IMAGE_SCN_MEM_READ