Static task
static1
Behavioral task
behavioral1
Sample
FileRen-v3.35/文件批量更名大师绿色.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FileRen-v3.35/文件批量更名大师绿色.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
FileRen-v3.35/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
FileRen-v3.35/新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
034a27fcb27f5fd7d4d00f38e4fc9ead
-
Size
475KB
-
MD5
034a27fcb27f5fd7d4d00f38e4fc9ead
-
SHA1
6ce656a0e45d57209da7813580d9b968f6ca2457
-
SHA256
a658954ba792841c4eee0b5a243899e678781ebf0be699a4e6b2ad0c8df93fcd
-
SHA512
d08bbade979a25926ace66c83c145fd7a7223ce52096faad84c0c34e289180c30ff1d821de646ac70f78a60025bf0650174c7c4c1a1c4bfa8c0cfe93e6b1ca92
-
SSDEEP
12288:21Vlz/vOiriA7KoYd5I8e0lIQvEUdtCtKTdlA5xq:2TOfA7WdaMlIQPdt+KfAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FileRen-v3.35/文件批量更名大师绿色.exe
Files
-
034a27fcb27f5fd7d4d00f38e4fc9ead.rar
-
FileRen-v3.35/文件批量更名大师绿色.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 937KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 473KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
FileRen-v3.35/新云软件.url.url