Static task
static1
Behavioral task
behavioral1
Sample
数字雨BySSWL/数字雨BySSWL.scr
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
数字雨BySSWL/数字雨BySSWL.scr
Resource
win10v2004-20240508-en
General
-
Target
71fd5039b84ed98003c9530af6aeb8785f37a87d80bc2ea3591b7a14dbb0db4a
-
Size
49KB
-
MD5
40a7ce8c8f3f32ad9b4e264a1bbcb51e
-
SHA1
3875d2417b5e652d7eaeb08255ce8f3ecdf0e039
-
SHA256
71fd5039b84ed98003c9530af6aeb8785f37a87d80bc2ea3591b7a14dbb0db4a
-
SHA512
2a261058b5198ad9e7bea77c2c4f6176e01ff14fca21b4feb92a6f7a625b6ed345baa206806e6a72a82cf3230d4fcf2dad1f88c24aa136ef7e10833e3dc56fa3
-
SSDEEP
1536:0RFqZLmVGglMQt+w1GVJkHgIvipLnu6hrpRIG:0hTt+w1fHZKLnHr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/数字雨BySSWL/数字雨BySSWL.scr
Files
-
71fd5039b84ed98003c9530af6aeb8785f37a87d80bc2ea3591b7a14dbb0db4a.zip
-
数字雨BySSWL/数字雨BySSWL.scr.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE