Static task
static1
Behavioral task
behavioral1
Sample
c46448e9b4d5494d65ec45632557695d72571dc370d506306d4d85ad5181e1a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c46448e9b4d5494d65ec45632557695d72571dc370d506306d4d85ad5181e1a6.exe
Resource
win10v2004-20221111-en
General
-
Target
c46448e9b4d5494d65ec45632557695d72571dc370d506306d4d85ad5181e1a6
-
Size
57KB
-
MD5
860e8ddb687b40c91253bc44a56af427
-
SHA1
d28d6a60774f32debc273a7e176f8dc6e43212c3
-
SHA256
c46448e9b4d5494d65ec45632557695d72571dc370d506306d4d85ad5181e1a6
-
SHA512
328e26c33396132d6dd8d8139e5b30cc2d7ef8cdaacb6669e060288ace119d1f6342988fd13b8c0be46a67582caabe2b2f9499afb2a8589e5bbd1ebbc3194aa1
-
SSDEEP
1536:jt93Xrh+pknjN8Matmx1laE5WnKUVkOACKgg:jt9Lh+p5Matmx1AVkOAC4
Malware Config
Signatures
Files
-
c46448e9b4d5494d65ec45632557695d72571dc370d506306d4d85ad5181e1a6.exe windows x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31/12/2007, 16:00Not After31/12/9998, 16:00SubjectCN=Qizhi Software (beijing) Co. Ltda7:7c:5c:72:de:e0:58:4d:62:f8:ed:05:8d:69:a5:49:8b:bf:3a:7eSigner
Actual PE Digesta7:7c:5c:72:de:e0:58:4d:62:f8:ed:05:8d:69:a5:49:8b:bf:3a:7eDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qizhi Software (beijing) Co. Ltd01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE