Behavioral task
behavioral1
Sample
DNS优选v0.0.3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
DNS优选v0.0.3.exe
Resource
win10v2004-20231020-en
General
-
Target
DNS优选v0.0.3.exe
-
Size
425KB
-
MD5
425679cfbed4f13bb73bd40cb0637657
-
SHA1
50e259e79f89d46a2156e52af8c40a6fb5337051
-
SHA256
2d853ec61c6767cd5360a42ea9c39da938f744c880a04a8f528d01097b7e067e
-
SHA512
ee67ea4a027dc7d29425e893591b89c7d69ed15bef9b205b3dd218174d9be0ec6bb1ec702beeb7eac914f953cdbadf79a028c23289617957b51aeed9554d2a7d
-
SSDEEP
12288:k9xs1oCKbeloQd0F+zUoIBECole5NpAoS:k9eHHaF+zUoIBEC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DNS优选v0.0.3.exe
Files
-
DNS优选v0.0.3.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 908KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 379KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE