Static task
static1
Behavioral task
behavioral1
Sample
回复 NEW ASPIRE - ORDER NO. (ASP-23-R002A34) - REVISE.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
回复 NEW ASPIRE - ORDER NO. (ASP-23-R002A34) - REVISE.exe
Resource
win10v2004-20230220-en
General
-
Target
回复 NEW ASPIRE - ORDER NO. (ASP-23-R002A34) - REVISE.exe
-
Size
1.2MB
-
MD5
d4b25bcb8b31e8e0d8edc73eb1575c32
-
SHA1
4df80287b8ffdaa4ec1e7a6a4fcc88d42f22af1f
-
SHA256
03ffb68eff3243fd41d28b9c63db4676e9f57bade03877307be6089e2d3a126a
-
SHA512
c0b83ecc1739cb41d683355740974e771c93810eb00073e9d4e15a488ec3bb680816634b662394511c6649f9f9cf162ace4375e366081dc3c317cbeeb502ee14
-
SSDEEP
24576:crXfXRZXPVsgK6AMyEupRNpV736I5bWNmpT:cDRFupr7r6Ium
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 回复 NEW ASPIRE - ORDER NO. (ASP-23-R002A34) - REVISE.exe
Files
-
回复 NEW ASPIRE - ORDER NO. (ASP-23-R002A34) - REVISE.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ