Static task
static1
Behavioral task
behavioral1
Sample
时间校准.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
时间校准.exe
Resource
win10v2004-20230220-en
General
-
Target
时间校准.exe
-
Size
415KB
-
MD5
9ca8ed91487ec052b4c93e0ad6ce4775
-
SHA1
e5da2205addecf2f099ed73bec9fa878a4a1f74d
-
SHA256
905872c1de0e07fb14574435cf77c23e278cd4b33170c05ab9babe7871db7069
-
SHA512
985e7aee37f76cba47cbf0c13f0b9d13a80a03fe25cbb705a3a12e592307df23c680b06951dc04d1a35cd3535b0e12c0532d6a1799050cb4af28f1f8d2ddd955
-
SSDEEP
1536:R3QdV+W9VotqVqxDZn7TC2ZOI7YvY7TC2ZOI7Yvb7TC2ZOI7Yv9O3dHscFuGMSv+:R30nc5Dl62V62a6213ZFuhSfZ62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 时间校准.exe
Files
-
时间校准.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ