Static task
static1
Behavioral task
behavioral1
Sample
1e71608b4e69baead283b4d5980de93ac572dac1dd7644961ac40aa59b7d1363.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
1e71608b4e69baead283b4d5980de93ac572dac1dd7644961ac40aa59b7d1363.exe
Resource
win10v2004-20231023-en
General
-
Target
1e71608b4e69baead283b4d5980de93ac572dac1dd7644961ac40aa59b7d1363
-
Size
337KB
-
MD5
efb92c92d128e675c6fe2eb58401bd22
-
SHA1
535073623f6e4ab1f83ad82f8b29718bad0071f3
-
SHA256
1e71608b4e69baead283b4d5980de93ac572dac1dd7644961ac40aa59b7d1363
-
SHA512
8822034ebaf0a83c54289b58249b60d30682adfec3f66a0fbba47904ded99dc79c0541024dbf104866504935dc7c3a705b14c9ea886a04e030f368f754fe9afc
-
SSDEEP
6144:Qs8yA00kW7Xqw9BcdwtOYGkWV0lMTDJjVNilHm2wvVofMqg1wYj0pVVNA:Qs8fOW78wtnGTVaO5VmG2wvV2MqgGK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e71608b4e69baead283b4d5980de93ac572dac1dd7644961ac40aa59b7d1363
Files
-
1e71608b4e69baead283b4d5980de93ac572dac1dd7644961ac40aa59b7d1363.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
PiaoYun Size: 255KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PiaoYun Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PiaoYun Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PiaoYun Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PiaoYun Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PiaoYun Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PiaoYun Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE