Static task
static1
Behavioral task
behavioral1
Sample
小飞dnf12.21.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
小飞dnf12.21.exe
Resource
win10v2004-20231215-en
General
-
Target
77ba241b03b8a39dfb43dd920b8216ec
-
Size
593KB
-
MD5
77ba241b03b8a39dfb43dd920b8216ec
-
SHA1
fc11433ea1b4b418e7ba15ab4e32d9f24329be58
-
SHA256
41a3b1cbcb8b7602a44c1584f94bde6d4c76e496803088e22ed5fb5910f89b23
-
SHA512
b880f9eb416b0ff3fb6d4d29b3c10266e25b6c38bb450e4c2d4da6aae3a7f22ea4196df79991c8a867f0532ed7c7fb52734f39574bf9a704d0ba37724bca78fa
-
SSDEEP
12288:hSuUXKmrIjy1Z8yN580iWMk/IJnVqrEKrqcCQQ3Wa5M9WuXcWhpyDVutkLSgHcU:hiIjvp0iNk/Sn8x8QQa4uTpy0iIU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/小飞dnf12.21.exe
Files
-
77ba241b03b8a39dfb43dd920b8216ec.rar
-
小飞dnf12.21.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Free Size: - Virtual size: 2.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X64 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE