Static task
static1
Behavioral task
behavioral1
Sample
古韵Steam激活入库工具2.2.vlic.exe
Resource
win11-20240709-en
General
-
Target
古韵Steam激活入库工具2.2.vlic.exe
-
Size
27.7MB
-
MD5
25e8795cc9e6d76103c77c7be2556472
-
SHA1
be6bf4f7f60b050310d19d17233f6a8ef062e2b7
-
SHA256
ea0ef35e8380186a7458d4833aea618b5dfe4aeba5537cfae86782b6aeca764c
-
SHA512
20ae11fdc1195e7f625248df190043c4554a7b7c8b937b931d456cccb6341f433fa03335d687b59ec2d24e5faf455ea04e38c224a35708db69777106315d25e2
-
SSDEEP
786432:3uIgx56IhOnbbSIifRD/S/BnWemvORJOM3o0x9WAbiSIF/:3uIEkIUnbbURDS5Wem6OytiDV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 古韵Steam激活入库工具2.2.vlic.exe
Files
-
古韵Steam激活入库工具2.2.vlic.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
L_gI79 Size: - Virtual size: 36.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L_hIpA Size: 27.7MB - Virtual size: 27.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE