Static task
static1
Behavioral task
behavioral1
Sample
公开解码软件.exe
Resource
win10v2004-20240508-en
General
-
Target
公开解码软件.exe
-
Size
98.5MB
-
MD5
dfae768fc19a457b1ead9d613972c597
-
SHA1
544aab9a0be2383ad07991b0203fb516d684b6f1
-
SHA256
278870a1883602134bc397917772becc5c35d3477e8e0082874e961e1950895d
-
SHA512
8da2eae8643cd75edeef7ad7b1fc2d31e560d8e5131e746ff4e7c9f4efb302968bc5614e775ca1f41d9c111dc652d72f2518871e23975fcd22cc0641073b8fc1
-
SSDEEP
1572864:SK1thNEGwdGLUm6UHoTJz7CnsMnOdtZMFeHPVeRJG175iL6fcrWeRg2d4AMxCZuz:SotXd2DmKJviEtTLlfcrE3kZumU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 公开解码软件.exe
Files
-
公开解码软件.exe.exe windows:5 windows x86 arch:x86
9f2a31135d07199a646ed21be5c85960
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
htons
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDlgCtrlID
CharUpperBuffW
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Draw
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 998KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 113.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0tR Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.;A9 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ze= Size: 98.4MB - Virtual size: 98.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ