Behavioral task
behavioral1
Sample
PM2023破解/Bonus/Bloatware.bat
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
PM2023破解/Bonus/Bloatware.bat
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
PM2023破解/Bonus/Internet Connection.bat
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
PM2023破解/Bonus/Internet Connection.bat
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
PM2023破解/欧特克许可证补丁程序安装程序.exe
Resource
win7-20231215-en
General
-
Target
4f3e63de4c1d34f473c0b478d6ca807a54b9bf2a702924bb175e3425298acabd
-
Size
1.1MB
-
MD5
8afbe9d1168c28561d4a28c9f857c120
-
SHA1
e312bec22f00b4bb502ed9529d5d4d9a3b558d71
-
SHA256
4f3e63de4c1d34f473c0b478d6ca807a54b9bf2a702924bb175e3425298acabd
-
SHA512
617b8e80eda1053bc9b4ff9b869970bfd5d740eb4cbad6704a219ca02b9af0efa8d6c5cec7203cff99253eea12d4aa4b8427c0586c1f7ca7a05dc9ba7bad4201
-
SSDEEP
24576:vO34LslTjmxb/UOgSF2bxKfAI0cA3yNnGhR9girEiUXYemmZ1rZW:mo4gxrUbbx+AWpn8XrCXYem2W
Malware Config
Signatures
-
resource yara_rule static1/unpack001/PM2023破解/欧特克许可证补丁程序安装程序.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PM2023破解/欧特克许可证补丁程序安装程序.exe
Files
-
4f3e63de4c1d34f473c0b478d6ca807a54b9bf2a702924bb175e3425298acabd.zip
-
PM2023破解/Bonus/Bloatware.bat
-
PM2023破解/Bonus/Internet Connection.bat
-
PM2023破解/ReadMe.txt
-
PM2023破解/ReadMe翻译.txt
-
PM2023破解/欧特克许可证补丁程序安装程序.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
PM2023破解/破解使用方法.txt