General

  • Target

    千方医保前置机更新程序.exe

  • Size

    51KB

  • MD5

    56106a3b61293966b2b5b854aaf24f10

  • SHA1

    e70470c6e0a4e39adde4582f50023da049117662

  • SHA256

    e9cc3351a059a73f2710a02a05c64589ab40a7eff86126aba1f4b6e4e2d87039

  • SHA512

    b2293fc7e485f0d891fccfcf3cf9ff2f91d8f0d64dfd7b3d5f8fd3b234751a4e92fba1ceeee48b0cc4b16ce09de176e690c5fcfb18ab0f9052f42ed5ec5f9d35

  • SSDEEP

    768:wXYdUURqhe7Ic3pQgx8wQvVqQmlaNdXoKgXZbLoRqhe7Ic3pQgx8wQvVqQ:wWxZ1PQvVqQiIdXohXZ3CxZ1PQvVqQ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 千方医保前置机更新程序.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections