Behavioral task
behavioral1
Sample
unpack.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
unpack.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
原版.exe
Resource
win7-20231023-en
General
-
Target
5b7c86771fbb9ee1fb9a06f5788db92bf8eabd274ed5a8725463517f7cf43860
-
Size
656KB
-
MD5
dec21640da8caa503a69b9e9754138c8
-
SHA1
40043a7e70e984483ee93bf122448f8b956d4fa6
-
SHA256
5b7c86771fbb9ee1fb9a06f5788db92bf8eabd274ed5a8725463517f7cf43860
-
SHA512
fd091ac7de16ffd3948597b31d8143afb1f523ae4a61cafb818fcdacfe793a7f6334420640ce5e84f1808155414360c4ad4e725f6eff4292a40d99c983594423
-
SSDEEP
12288:TBTM/1GMCnAuFdikDkzMMkpr8zVPfvlYJpnAlE2B5mjXiDG/VLteFpr3:Fw/1GMoH9DkzEprCdvlS8mWqlspr3
Malware Config
Signatures
-
resource yara_rule static1/unpack001/unpack.exe upx static1/unpack001/原版.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/unpack.exe unpack001/原版.exe
Files
-
5b7c86771fbb9ee1fb9a06f5788db92bf8eabd274ed5a8725463517f7cf43860.rar
-
unpack.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
原版.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE