Static task
static1
Behavioral task
behavioral1
Sample
FB-108N & FB-108NK 詢價 - 田勤.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FB-108N & FB-108NK 詢價 - 田勤.exe
Resource
win10v2004-20221111-en
General
-
Target
FB-108N && FB-108NK 詢價 - 田勤.zip
-
Size
963KB
-
MD5
3ac09f93b6d0ca93ba3edd0ef0569ae5
-
SHA1
0bcd27960d5258ec9e007dd9f2c27bab58078ea7
-
SHA256
8533643ccccdd517ac1b94767c93929c66bcf97177000a1b4764436dc1357d1d
-
SHA512
b46776d203ba087ed92bd3f80e89f42f77152b2080b9991ed2df207ee4eadec042079e05947c67d471497028301ea27e6d977844629a0a667085dc5271f4c432
-
SSDEEP
24576:8gn4Nhxd170uqj98Fw5gFNc0FXyKWw+/jM99YRYzarGIe:8gnExd170/j9SA0x/ajAaI
Malware Config
Signatures
Files
-
FB-108N && FB-108NK 詢價 - 田勤.zip.zip
-
FB-108N & FB-108NK 詢價 - 田勤.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 994KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ