Static task
static1
Behavioral task
behavioral1
Sample
云天袋装水泥自动装车系统.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
云天袋装水泥自动装车系统.exe
Resource
win10v2004-20230220-en
General
-
Target
云天袋装水泥自动装车系统.exe
-
Size
306KB
-
MD5
67f394311c78eca9b6679d41697ee66a
-
SHA1
92773206cb0b5cad21e78bd8e5007efc5e2be4af
-
SHA256
9318134be3e2d1cb794d047ed21ebbcb45d8afcf20c02a6379526a1d16c30960
-
SHA512
8fd32682157a3c3f92bc8b8498e053efcae9eae5b3ff2c640eb29e6ca42d050145f4298b79df01c1e874f3d8e208df0a0ddb69598d58bd7c1f4a27f091fee84f
-
SSDEEP
3072:fY7wInD+/gDjCuQkzs91kR+N7DR9Q0LoLN1q16IASLswOoprkIiDG+uXfz5PzUS3:fY7wInD9nBzs91A0QN1q1/LsXD6fzJz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 云天袋装水泥自动装车系统.exe
Files
-
云天袋装水泥自动装车系统.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ