Behavioral task
behavioral1
Sample
桌面时钟1.5 (1).exe
Resource
win7-20240903-en
General
-
Target
84ea5e9040fd59958c819a719fb274a59aae44cb138b4465c0ad92c77c3811ed
-
Size
897KB
-
MD5
41725d9c6ef27f4497b305eba4390b7c
-
SHA1
d883ad1a0ef21a1d571b3e0c9b1e076daec3e123
-
SHA256
84ea5e9040fd59958c819a719fb274a59aae44cb138b4465c0ad92c77c3811ed
-
SHA512
cc4ec93e6e2646524f9b14e41fa6a8e8a61ca0504b710b903cbe7887a0f86cb8afe1e7750b793edb228a076b483b3ed9a8ef4df11109abb958f8f4f7bcce3717
-
SSDEEP
24576:0QlRocBgr8AP1xrAMtmZyI8ladQNTidlBZdP:0Mgr8k1xNtmZpeKBZF
Malware Config
Signatures
-
resource yara_rule static1/unpack001/桌面时钟1.5 (1).exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/桌面时钟1.5 (1).exe
Files
-
84ea5e9040fd59958c819a719fb274a59aae44cb138b4465c0ad92c77c3811ed.zip
-
桌面时钟1.5 (1).exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 891KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE