Static task
static1
Behavioral task
behavioral1
Sample
9bc6ec95b5a397ab46cb89292225f7f062d9ccee027b809927f1f2c84b9dd228.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9bc6ec95b5a397ab46cb89292225f7f062d9ccee027b809927f1f2c84b9dd228.exe
Resource
win10v2004-20220812-en
General
-
Target
9bc6ec95b5a397ab46cb89292225f7f062d9ccee027b809927f1f2c84b9dd228
-
Size
17KB
-
MD5
4d0feef68ba824d3071ff4d0c45e6a9f
-
SHA1
8f4ceb54ec5ede4feec85310246f1b0b075c6242
-
SHA256
9bc6ec95b5a397ab46cb89292225f7f062d9ccee027b809927f1f2c84b9dd228
-
SHA512
d0882f0ceac086b0c41f582c67ad6428e81c53ca7ccb92167f2b31c5edb0e40b72ff5d8ef249358a7897895b4092fc67f16e052e9398cb3784e2327207c63773
-
SSDEEP
384:r08DmcQ8dHpNiXZfuAJmru83pF7TZYWPuIEiJOFlN:r08DmcQ8dHpNi1uua71YWPK
Malware Config
Signatures
Files
-
9bc6ec95b5a397ab46cb89292225f7f062d9ccee027b809927f1f2c84b9dd228.exe windows x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31/12/2007, 16:00Not After31/12/9998, 16:00SubjectCN=Qizhi Software (beijing) Co. Ltd0a:ef:4b:f1:93:16:20:66:c3:c6:95:fa:4d:67:79:6f:58:07:76:c4Signer
Actual PE Digest0a:ef:4b:f1:93:16:20:66:c3:c6:95:fa:4d:67:79:6f:58:07:76:c4Digest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qizhi Software (beijing) Co. Ltd01/12/2022, 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.packed Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE