CreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
导出流水状况.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
导出流水状况.exe
Resource
win10v2004-20230220-en
General
-
Target
导出流水状况.com_
-
Size
6.7MB
-
MD5
9de58a47dc0ddc03b7ac693d99687531
-
SHA1
324b0906be1b53a439c1c1ee322acdff1d8459d8
-
SHA256
542574d5a06f3e3c362ddf812638bed924558f26579789de432f174792398231
-
SHA512
bb2135f5c9df6677be900eb4af495bf8adcb6fd9ba95fa07de75ff816e8e7b5b1a6b403b233bfe8a4108a58c9a972f985e801979bf33e6d21f7430d42bfa9d85
-
SSDEEP
98304:lOEYwyhvXeHcwsAIGeJ1M9wwaf1nW1iu8vl8HTeYJkmBBO/hRVcbgrJ2GBqmylXz:shvXetIbeww21nhjNMnmAkXV7Lqt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 导出流水状况.com_
Files
-
导出流水状况.com_.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.9MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 238KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 551KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 13.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dddsw Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE