Static task
static1
Behavioral task
behavioral1
Sample
对账单.exe
Resource
win10-20230220-en
General
-
Target
对账单.exe
-
Size
2.6MB
-
MD5
b961e59cda3ff1041e21388cb302acaf
-
SHA1
d0a1793e496a20eee87b411280ad074d7910de20
-
SHA256
5eb73810a3549306623183a614890a10e5d2b320b0f9abf592ac0e61a9aea70a
-
SHA512
db42cf8f805b245ecca644a3710b749820abe63c470bf49757d4322ace8a4690aa7267add9d46ca398af6294a6ef4660b39cf5f562a4cf12a5f958d4fa4a6595
-
SSDEEP
49152:UTpSPSNZ2AroZ1hXS9sPuB8/ljlffP4KJp+fa3rLA6s+/wboK:DPLAw1hX0l2/rfAgp0a3X5
Malware Config
Signatures
Files
-
对账单.exe.exe windows x86
1b9df46d4417cab74b403cbf46fe2ce2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
FindResourceA
Sleep
SizeofResource
user32
ShowWindow
FindWindowA
shell32
ShellExecuteA
mfc42
ord537
ord535
ord353
ord6385
ord561
ord815
ord800
ord665
ord1979
msvcrt
__CxxFrameHandler
fclose
_controlfp
fopen
exit
_access
__dllonexit
_onexit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
fwrite
msvcp60
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ