Behavioral task
behavioral1
Sample
DNS优选.exe
Resource
win7-20240903-en
General
-
Target
63d0cabdd7dfd16533e638fec454046f7c40d86c82ed18219fe650a05fc987a2
-
Size
413KB
-
MD5
023100d061177c233a5c39a146abd8c4
-
SHA1
85a12ec487d5e933580cc42925c987d8c4ffe5fc
-
SHA256
63d0cabdd7dfd16533e638fec454046f7c40d86c82ed18219fe650a05fc987a2
-
SHA512
af130fa76d33a0de72c0f5f347ce1f26369887518579152267353bdc4be4546248bfd105467b1aed65cb7fa25ac21efb2a24867372174a461f7596361ea80a26
-
SSDEEP
12288:nYV6TQpEwQBom6h9P8vogNTH7MWzpNC4W8DLX6kB46DhIbP:vZwOohd8ggNTH7MWzi4W8XqqlDhIbP
Malware Config
Signatures
-
resource yara_rule static1/unpack001/DNS优选.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DNS优选.exe
Files
-
63d0cabdd7dfd16533e638fec454046f7c40d86c82ed18219fe650a05fc987a2.rar
-
DNS优选.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 908KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 379KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�@�u: Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE