Static task
static1
Behavioral task
behavioral1
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
安装说明.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
盛名时刻.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
盛名时刻.exe
Resource
win10v2004-20231215-en
General
-
Target
09738cc735c9d846bdc5026c5201a806
-
Size
668KB
-
MD5
09738cc735c9d846bdc5026c5201a806
-
SHA1
a87e73fdaf7389bb6233c1aea45bbe08fa95c7c3
-
SHA256
84f59a0390e1dc2dcd5dd224b52571ec4099801b2a57839be36019721232db56
-
SHA512
c0220ed074b216dcfe434901fff4608dda00352b294a9bb1e0e2333ac78101076d844345f4634a5addc9c457ca9fab2a02e16382476ef3fd28ea445450e8cac6
-
SSDEEP
12288:hNcDpXTp5aUy4ZNxEQvMhmi6OEDSW1sFgEqRvu2MTao84hiekq:7s9HycxHMsTOEOW2gEqRm2Bo84hiDq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/盛名时刻.exe
Files
-
09738cc735c9d846bdc5026c5201a806.rar
-
安装说明.url.url
-
盛名时刻.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 669KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE