Static task
static1
Behavioral task
behavioral1
Sample
jfsky.com-Translation/大众翻译软件 9.0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
jfsky.com-Translation/大众翻译软件 9.0.exe
Resource
win10v2004-20231215-en
General
-
Target
1838923062f90fd1ac55cb5641a97a30
-
Size
2.4MB
-
MD5
1838923062f90fd1ac55cb5641a97a30
-
SHA1
7bc079ec6bf6a80e6e551e6c8c880f5291df5197
-
SHA256
61a6bf70e25115b3f19217679de6532062e3589401a6bf1cfea4639b2a77fc53
-
SHA512
eb303dd7df724a986c4c18cc45e4c3f906fb6bd66919a2452fad2dbaa96fbefc83d4fb01534ab377cc5f6283c625fe38b76c8cc14e60a3bdef7fff59509e30fb
-
SSDEEP
49152:82pGoNLtDRa5dRfSqztwE3y0GTo5dGjTx6Y5V96Yu+SJz4MObi:82p7anRfe2LeKdGxXrohJcMO2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/jfsky.com-Translation/大众翻译软件 9.0.exe
Files
-
1838923062f90fd1ac55cb5641a97a30.rar
-
jfsky.com-Translation/大众翻译软件 9.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.pec1 Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec1 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE