Behavioral task
behavioral1
Sample
VB经典编程 破解版/cr&key/vb1-key.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VB经典编程 破解版/cr&key/vb1-key.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
VB经典编程 破解版/vb1.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
VB经典编程 破解版/vb1.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
VB经典编程 破解版/中国破解联盟-木蚂蚁社区.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
VB经典编程 破解版/中国破解联盟-木蚂蚁社区.url
Resource
win10v2004-20231215-en
General
-
Target
4fcebd27699f082310a42e1d4b0620dd
-
Size
895KB
-
MD5
4fcebd27699f082310a42e1d4b0620dd
-
SHA1
cb5ca6dddd60ee5a808af94a269482bd8ba4b2a1
-
SHA256
5cbef43832ac840e658fc9ed9a66ec81cb5d5664782a5ab8907bf73ddfb02c50
-
SHA512
dc2d69a6143643a307ae6c16fb4035682bbf3ef8d58bb4a354c02e2f4b768b6e5efff034bf0acef8e4e3b3c8fe08771ecee2b317bb73552f01c731add2dc91de
-
SSDEEP
12288:qGlYxW1XmIQvo7mLsZfYHPXR/AQLR8UQ9jFMpkGGfTzJv8m1cbXYR0D27dE3ARd5:HlYM1Xmxvo7mSfmB9eZGuzJiD2ouU16
Malware Config
Signatures
-
resource yara_rule static1/unpack001/VB经典编程 破解版/vb1.exe upx -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/VB经典编程 破解版/cr&key/vb1-key.exe unpack001/VB经典编程 破解版/vb1.exe unpack002/out.upx
Files
-
4fcebd27699f082310a42e1d4b0620dd.rar
-
VB经典编程 破解版/cr&key/vb1-key.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
VB经典编程 破解版/vb1.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
VB经典编程 破解版/中国破解联盟-木蚂蚁社区.url.url
-
VB经典编程 破解版/使用说明.txt
-
VB经典编程 破解版/注册说明.htm.html .js polyglot