Static task
static1
Behavioral task
behavioral1
Sample
a54d40bedbef227f34a09e1d4bee2af10b84b28c75e06016edce56e959eb6e7c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a54d40bedbef227f34a09e1d4bee2af10b84b28c75e06016edce56e959eb6e7c.exe
Resource
win10v2004-20221111-en
General
-
Target
a54d40bedbef227f34a09e1d4bee2af10b84b28c75e06016edce56e959eb6e7c
-
Size
46KB
-
MD5
72cc87459abefce99b972f0f46d6d068
-
SHA1
02e4d67c8f01ef5bc5f4e748562ef503db8a8fc9
-
SHA256
a54d40bedbef227f34a09e1d4bee2af10b84b28c75e06016edce56e959eb6e7c
-
SHA512
54536bcff8174d1ed64e5a96ff02d66518949d592dc8ffb48ec3834b46362bdd41bb91107654a5fc95471b95bb83bc52ead4889362697e73a5aadc9332b1c526
-
SSDEEP
768:7qTNRRH4YvUpU5PE8SXNfUFENfcHAuaxyINXed5ozx:7q/lUC588Atm+fcHhuXeex
Malware Config
Signatures
Files
-
a54d40bedbef227f34a09e1d4bee2af10b84b28c75e06016edce56e959eb6e7c.exe windows x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31-12-2007 16:00Not After31-12-9998 16:00SubjectCN=Qizhi Software (beijing) Co. Ltd5b:b2:a7:6b:b2:12:b2:8d:8d:ec:cd:70:d0:f5:e7:0e:0b:01:ee:34Signer
Actual PE Digest5b:b2:a7:6b:b2:12:b2:8d:8d:ec:cd:70:d0:f5:e7:0e:0b:01:ee:34Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qizhi Software (beijing) Co. Ltd01-12-2022 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.packed Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE