Static task
static1
Behavioral task
behavioral1
Sample
d489e331692e5d6813d0ffe12a8bc919324ffa57e83283569c9e22271cd75dc7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d489e331692e5d6813d0ffe12a8bc919324ffa57e83283569c9e22271cd75dc7.exe
Resource
win10v2004-20221111-en
General
-
Target
d489e331692e5d6813d0ffe12a8bc919324ffa57e83283569c9e22271cd75dc7
-
Size
12KB
-
MD5
a29a16d6b04433a6656d2bfba53bc35e
-
SHA1
b2f78f56ba44db59a826e4365344f941fd593866
-
SHA256
d489e331692e5d6813d0ffe12a8bc919324ffa57e83283569c9e22271cd75dc7
-
SHA512
53de804d64b46b882e7d9a9a4bc27207a37474bdcd1ee3105b199d5ec769336867b6342836146641f47e83df638d54020919c35fca23517c8d5b8581a86eae3c
-
SSDEEP
384:2mJAPb4u1Di00w+Q0Q40Xbs1q69Fi3JlxBk:2mqbDUw+T6wR9Fi
Malware Config
Signatures
Files
-
d489e331692e5d6813d0ffe12a8bc919324ffa57e83283569c9e22271cd75dc7.exe windows x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31-12-2007 16:00Not After31-12-9998 16:00SubjectCN=Qizhi Software (beijing) Co. Ltd54:e3:29:c6:d5:78:94:31:25:d5:e4:a5:8e:e4:77:f5:2e:18:fd:ccSigner
Actual PE Digest54:e3:29:c6:d5:78:94:31:25:d5:e4:a5:8e:e4:77:f5:2e:18:fd:ccDigest Algorithmsha1PE Digest MatchesfalseSignature Validations
TrustedfalseVerification
Signing CertificateCN=Qizhi Software (beijing) Co. Ltd01-12-2022 14:34 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.packed Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE