Static task
static1
Behavioral task
behavioral1
Sample
Na文字识别.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Na文字识别.exe
Resource
win10v2004-20240226-en
General
-
Target
a9e539d57b35929737c88793dfd75055
-
Size
583KB
-
MD5
a9e539d57b35929737c88793dfd75055
-
SHA1
41c387039e4e60c7b1fe43176113841063ed8bcb
-
SHA256
61141c429b708e6065a3cc94008f02e5b931fad58ef6671ccb288d01cdc96759
-
SHA512
ba04b6a94a50b88c8b1ba2c8d75571713549b885c8e97772fc63052ad3b5a97b2ae3810852f74152d9f0421843f7c08ff89c3bd85fc508a0bed79c29a8396503
-
SSDEEP
12288:tT7jlvxSfEcEr/WjyHOrYzU7QgdTVqh1LIagjr7p/Gbw:N7jlvxS+DWj2CYzWJaPunp/Gbw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Na文字识别.exe
Files
-
a9e539d57b35929737c88793dfd75055.zip
-
Na文字识别.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Free Size: - Virtual size: 1.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X64 Size: 574KB - Virtual size: 576KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE