Behavioral task
behavioral1
Sample
conconyy-v1.3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
conconyy-v1.3.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
5725c165e9ee9f767ec25c97b8e472e1
-
Size
567KB
-
MD5
5725c165e9ee9f767ec25c97b8e472e1
-
SHA1
423d77686e64bab1dca5682ee6bfa0b007628d33
-
SHA256
6ff103f19d6f72da94f0a186344b90757f552c97297bb8c1e038d4a501927d01
-
SHA512
ab1ab8f441fa0b2ba9e4347810cb95ddbb1519cf6230368e81f8b3b41cdb1e03355d06d602696ccc7daadc880a6446ccd65eeb91a950448966923932f050b8f5
-
SSDEEP
12288:48jLsI6YiJj8zbnVf6cKi8wyy/WLPgDIdNVdR6fl:48jLsFJjQVKh+y4D+Nt8
Malware Config
Signatures
-
resource yara_rule static1/unpack001/conconyy-v1.3.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/conconyy-v1.3.exe unpack002/out.upx
Files
-
5725c165e9ee9f767ec25c97b8e472e1.rar
-
conconyy-v1.3.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 577KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 528KB - Virtual size: 526KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 888KB - Virtual size: 887KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
新云软件.url.url