Static task
static1
Behavioral task
behavioral1
Sample
TXT文本加密精灵.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TXT文本加密精灵.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
c51f55cb78bdc68669bf2c2f976951b2
-
Size
312KB
-
MD5
c51f55cb78bdc68669bf2c2f976951b2
-
SHA1
c842126736fb956ce2b94452b69775be14ce9861
-
SHA256
173a4de7795afbef225882a883bd0bf70b830b2d4b93fa86ce1c7309d0c531c8
-
SHA512
f9be49ec07d2a5ad362961297eb0705badf5f51fcdcaa381473404ea1bc294a53598a834edc6e17f12474e1c7ba9ca6cc1cdc5ba3fe68544930da45596ad6ad4
-
SSDEEP
6144:5pHCUOrY0BWv/YWeA+UOcXanklzVA+trN6+E+sUug8oe/r7TlparV:3HCUHMWv/6AcpklzW+trYH+vNOH8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/TXT文本加密精灵.exe
Files
-
c51f55cb78bdc68669bf2c2f976951b2.rar
-
TXT文本加密精灵.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
BY:��' Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BY:��' Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BY:��' Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
使用说明.txt
-
新云软件.url.url