Static task
static1
Behavioral task
behavioral1
Sample
9b1325e9f5184448ad4e8861cdd0314c4510f4894d59c05c9b29327a9121c205.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b1325e9f5184448ad4e8861cdd0314c4510f4894d59c05c9b29327a9121c205.exe
Resource
win10v2004-20220901-en
General
-
Target
9b1325e9f5184448ad4e8861cdd0314c4510f4894d59c05c9b29327a9121c205
-
Size
30KB
-
MD5
a65c13fc9d3803e6235dfd56bb0fb0f3
-
SHA1
f24f582aac4f6069143c873379b2e4070372acb4
-
SHA256
9b1325e9f5184448ad4e8861cdd0314c4510f4894d59c05c9b29327a9121c205
-
SHA512
4a1aedbdc2d4b6ce7ce79b4ac2ffb662a3fb1839b4b0747840b1385d90b9591a0778547a291c0023464b8e0d309ceb3ae7b28fb787af223d9a6d0fb414ab3384
-
SSDEEP
768:BTOZDX97QsM9S6mAzbMIdg4oGJVI6zLGucEOC:kZDX9Es2DkWg4hJVIWn9
Malware Config
Signatures
Files
-
9b1325e9f5184448ad4e8861cdd0314c4510f4894d59c05c9b29327a9121c205.exe windows x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31/12/2007, 16:00Not After31/12/9998, 16:00SubjectCN=Qizhi Software (beijing) Co. Ltdf7:64:be:38:45:cd:81:4f:1b:c8:22:7c:a8:b1:67:fd:0e:d6:b7:a0Signer
Actual PE Digestf7:64:be:38:45:cd:81:4f:1b:c8:22:7c:a8:b1:67:fd:0e:d6:b7:a0Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qizhi Software (beijing) Co. Ltd01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: 40B - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE