Behavioral task
behavioral1
Sample
闪存大师FlashMaster_v1.8.0.29.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
闪存大师FlashMaster_v1.8.0.29.exe
Resource
win10v2004-20240508-en
General
-
Target
闪存大师FlashMaster_v1.8.0.29.exe
-
Size
658KB
-
MD5
ea21ba38913d4eb3ecae9750b427b57a
-
SHA1
248322ae1fb6d0a6435086b6ac5e0de12c014081
-
SHA256
91faa4b1de8b80f07132085235e498d1d621ad745626b0f3ce91c67b166d6a14
-
SHA512
28e26858fb50be1ea95e4d63fd471c8c4b80f1e662025e1328f84fb1b254f58d5e28da20239c2c4298b42c29c43b6f3d9ceccb6dd1cf33be0c1085104a9a77e4
-
SSDEEP
12288:kuk9HZwPqr8gFz2Trg0Y39NmoXKzvkU+d3yX7alQg/YljSlVGmujMmkmQoSc0XPl:SIqrpV1svkUE3m7wh/YljSlmFJo5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 闪存大师FlashMaster_v1.8.0.29.exe
Files
-
闪存大师FlashMaster_v1.8.0.29.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 972KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 597KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE