Static task
static1
General
-
Target
公积金比例调整20230511537965812795071207395.exe
-
Size
2.5MB
-
MD5
ab0850b83819d864f32a00e0bca2d563
-
SHA1
1391181f0858526d46fc7a0cd13839ecbafb1345
-
SHA256
de32aa413fef54c60e67435201e0c41bd01b6208532f9c60758723d23cb8a3b9
-
SHA512
cdcafacbc85b6008a9620ca2e963edfe217e0f29ffe3b9f7b5e293a3eca4c0b8ed5b3082caa3506db06808f36a7e7848728d0fd175c23a55499b84713d67faca
-
SSDEEP
24576:/lKv/ZXLhIy1I5tWGyQHxu8U2loe9sOmZ22lcZcCs1Pvl1KEV9vqLWB9iLn:dqXLhIyKHxu8U21s7lw0HKM9on
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 公积金比例调整20230511537965812795071207395.exe
Files
-
公积金比例调整20230511537965812795071207395.exe.exe windows x64
1e3613b25a20ff8e262865bf96f1a6c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
CryptGetHashParam
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptSetKeyParam
CryptGetKeyParam
CryptDecrypt
user32
MessageBoxA
CharNextW
LoadStringW
TranslateMessage
MessageBoxW
LoadStringW
GetSystemMetrics
GetMessageW
DispatchMessageW
CharUpperW
CharLowerBuffW
kernel32
Sleep
VirtualFree
VirtualAlloc
GetLogicalProcessorInformation
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
lstrlenA
lstrlenW
lstrcpynW
lstrcpyA
lstrcmpiA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
Sleep
SetFilePointer
SetEvent
SetEndOfFile
ResetEvent
ReadFile
LocalFree
IsValidLocale
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetThreadLocale
GetNativeSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetComputerNameW
GetCPInfoExW
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
ExitProcess
EnumCalendarInfoW
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
ole32
CoUninitialize
CoInitialize
msvcrt
isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
iscntrl
isalpha
isalnum
toupper
tolower
strchr
strlen
strncmp
strcmp
memset
memcpy
memcmp
_wcslwr
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1017KB - Virtual size: 1017KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 39KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 416B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ