建信人寿保险股份有限公司天津分公司第二季度五月份考勤异常登记表202206131013[.]exe

General

Target
建信人寿保险股份有限公司天津分公司第二季度五月份考勤异常登记表202206131013.exe
Size 131KB
Sample220613-tfmx4sddg7
SHA256 a4ad69ba5f948a165b7443439a9dfd9d84d71b4c729bbe3909b493dbe84cad7b
MD5 d56e4b539b3316f09313fabb4b7b4c4a
SHA1 4b4c683ca22aaa919ef58a5af417073b37ea94f9
SHA512 a242d176fa5bac05db9ba2cca4b9fba005d3c5bc3f491c9b12dbc63212c07ef108689bfa8a8373082492747e81c9682703b278a4853de46a8e0944906234c305
SSDEEP 3072:SpDRuLpVAWmLAo3DGdIyzWWMOXThodeTZwyH1X:QMze8o3D8y6eiWy
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

建信人寿保险股份有限公司天津分公司第二季度五月份考勤异常登记表202206131013.exe

.exe 131KB

建信人寿保险股份有限公司天津分公司第二季度五月份考勤异常登记表202206131013.exe

IMPHASH c55fb8b4b38cd18b83d9759e886fff0f
SHA256 a4ad69ba5f948a165b7443439a9dfd9d84d71b4c729bbe3909b493dbe84cad7b
MD5 d56e4b539b3316f09313fabb4b7b4c4a
SHA1 4b4c683ca22aaa919ef58a5af417073b37ea94f9
SHA512 a242d176fa5bac05db9ba2cca4b9fba005d3c5bc3f491c9b12dbc63212c07ef108689bfa8a8373082492747e81c9682703b278a4853de46a8e0944906234c305
SSDEEP 3072:SpDRuLpVAWmLAo3DGdIyzWWMOXThodeTZwyH1X:QMze8o3D8y6eiWy
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

13284

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetProcessHeap HeapWalk GetCurrentProcess GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread VirtualProtect GetProcAddress LoadLibraryA LoadLibraryW GetProcessAffinityMask CreateToolhelp32Snapshot Thread32First Thread32Next GetVersionExW VirtualQuery IsBadReadPtr Module32FirstW Module32NextW WriteConsoleW CreateFileW SetFilePointerEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetFileType SetStdHandle GetStringTypeW HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode

user32

MessageBoxA

dbghelp

SymInitializeW

Sharing