Behavioral task
behavioral1
Sample
含羞草考试安排系统v14.11.23.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
含羞草考试安排系统v14.11.23.exe
Resource
win10v2004-20221111-en
General
-
Target
ab3a38e4e5f6cc976ab8ccaa718c8f87b9f4d9934ae6da98a808cefc2491c9a3
-
Size
3.7MB
-
MD5
b2d312b7a2d4155592133cacc76bcc89
-
SHA1
63469aeb8bb97417a52e650590a0581c0e3f4149
-
SHA256
ab3a38e4e5f6cc976ab8ccaa718c8f87b9f4d9934ae6da98a808cefc2491c9a3
-
SHA512
4d4085a3a5a919a04aedf5e467e2cd982267b8b511154c6792291f961bda2ee24f6eaf5a4d16dfdea6d0db21b13dcf2a47ae28fd48b557325b7bbfe81a2eb92d
-
SSDEEP
98304:vSR8H3SsRvTlpek869YdTykkVRMLlZoBkfcQKwU2:SG3jvyk869xkhzoBrQE2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/含羞草考试安排系统v14.11.23.exe upx
Files
-
ab3a38e4e5f6cc976ab8ccaa718c8f87b9f4d9934ae6da98a808cefc2491c9a3.zip
-
下载说明.htm.html .js
-
含羞草考试安排系统v14.11.23.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 765KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE