Static task
static1
Behavioral task
behavioral1
Sample
4d7a2c8031538179a7a715ea51672f4492e59d694d305e5a8921810482c66dc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d7a2c8031538179a7a715ea51672f4492e59d694d305e5a8921810482c66dc0.exe
Resource
win10v2004-20220812-en
General
-
Target
4d7a2c8031538179a7a715ea51672f4492e59d694d305e5a8921810482c66dc0
-
Size
17KB
-
MD5
93016bcdf14fb9bab65a21f6cc63db7b
-
SHA1
408f8aab69614dfef47ee7ae9b68513dd6388ffa
-
SHA256
4d7a2c8031538179a7a715ea51672f4492e59d694d305e5a8921810482c66dc0
-
SHA512
eb6ead7a893ad38fcb0f3c67b03adc278e2a0f4377975b79a469239b4f53dfaec5a3fe4d66c14e3e071ab28de5b4e6543bc22289ca8d1bfd80ff5d082b1a61f1
-
SSDEEP
384:r08DmcQ8dHpNiXZfuAJmru83pF7TZYWPuIEiJOFlN:r08DmcQ8dHpNi1uua71YWPK
Malware Config
Signatures
Files
-
4d7a2c8031538179a7a715ea51672f4492e59d694d305e5a8921810482c66dc0.exe windows x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31/12/2007, 16:00Not After31/12/9998, 16:00SubjectCN=Qizhi Software (beijing) Co. Ltd2d:da:0d:22:4d:61:de:12:a7:55:f2:af:3c:54:3d:65:24:a5:84:d1Signer
Actual PE Digest2d:da:0d:22:4d:61:de:12:a7:55:f2:af:3c:54:3d:65:24:a5:84:d1Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qizhi Software (beijing) Co. Ltd15/09/2022, 14:52 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.packed Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE