Behavioral task
behavioral1
Sample
※金庸神魔※V8传奇.exe
Resource
win7-20240903-en
General
-
Target
42ffb5c393d2dfe950046c93f197900eb9b6b689506df793982472a542c4abd5
-
Size
13.7MB
-
MD5
de1dcbd19a7d6c85b8f4c0f3ace5a5bc
-
SHA1
f58c9a8f2e5495ffedc70d4b078c37a53bf032ce
-
SHA256
42ffb5c393d2dfe950046c93f197900eb9b6b689506df793982472a542c4abd5
-
SHA512
ac66338be3b611fa31f4e44c1cc9ade824cf32255430a6b55346894ffbb4d82614b787bd7d14d928bc0a577022a76ab5cccef339681ae9d5311879b82ecb8331
-
SSDEEP
393216:EJaE9bQDO6Wg2OfWQ5iu6VN/JRyMUnOR3AnjaEd+xIN/UWqON0aRcw:qQDWQ8P/qxnORQGESIpNXBL
Malware Config
Signatures
-
resource yara_rule static1/unpack001/※金庸神魔※V8传奇.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/※金庸神魔※V8传奇.exe
Files
-
42ffb5c393d2dfe950046c93f197900eb9b6b689506df793982472a542c4abd5.zip
-
※金庸神魔※V8传奇.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE