Static task
static1
Behavioral task
behavioral1
Sample
[外部]发送发票REI-5240-付款_eml.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
[外部]发送发票REI-5240-付款_eml.exe
Resource
win10v2004-20220812-en
General
-
Target
781b7310ba4226975b3b476734bbde1ed35db9e0fe298687afbecec8b8445dc9
-
Size
283KB
-
MD5
30051ac31f13976c509eb24f3138863e
-
SHA1
ed951f72c1d36586d15b58abda6fd97e636bc573
-
SHA256
781b7310ba4226975b3b476734bbde1ed35db9e0fe298687afbecec8b8445dc9
-
SHA512
c877b3677b91e2274ade722f0a067f3f59397f04fb46ee58a2468c616ea8fa0517aa6aa2cc00144ce3f9f60a8818fcd8668a899ad4fa0ca77894b3d0c9306218
-
SSDEEP
6144:ScM2i/piOKuRlq+v3cCPKBZoSdqoUNV8DpE+3ApyA5WndJHxo+:SFz3n3cJjOooV8DOyP/t
Malware Config
Signatures
Files
-
781b7310ba4226975b3b476734bbde1ed35db9e0fe298687afbecec8b8445dc9.rar
-
[外部]发送发票REI-5240-付款_eml.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 426KB - Virtual size: 425KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ