Overview
overview
7Static
static
3LabelSoft_...ft.exe
windows7-x64
7LabelSoft_...ft.exe
windows10-2004-x64
7LabelSoft_...xe.xml
windows7-x64
1LabelSoft_...xe.xml
windows10-2004-x64
1LabelSoft_...es.dll
windows7-x64
1LabelSoft_...es.dll
windows10-2004-x64
1LabelSoft_...es.dll
windows7-x64
1LabelSoft_...es.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
LabelSoft_5.83/LabelSoft.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LabelSoft_5.83/LabelSoft.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
LabelSoft_5.83/LabelSoft.exe.xml
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
LabelSoft_5.83/LabelSoft.exe.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
LabelSoft_5.83/en/LabelSoft.resources.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
LabelSoft_5.83/en/LabelSoft.resources.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
LabelSoft_5.83/zh-Hant/LabelSoft.resources.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
LabelSoft_5.83/zh-Hant/LabelSoft.resources.dll
Resource
win10v2004-20230220-en
General
-
Target
4fdfec28127474247cfece9a0236a45edfd18d57be499a401c8cad33b86b136a
-
Size
4.4MB
-
MD5
7c8634ad206e566e934acc148b9ab8c2
-
SHA1
01f747e304c09f48225e8379e31b7ff5a2ede2d8
-
SHA256
4fdfec28127474247cfece9a0236a45edfd18d57be499a401c8cad33b86b136a
-
SHA512
60f7f86eca583b589f9b316afeadd71b954c762cf5e8bb1b6a48d4a438749a38cb29d0c7b105e455aa367d88d91183874ec9aed637c3a69f71d640eccca75560
-
SSDEEP
98304:1Ul0Q1qQHjcJKSBWAbW8tmhVploYqkm21WRmx54o:Q0QEijc0qIhVploM1WA4o
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/LabelSoft_5.83/LabelSoft.exe unpack001/LabelSoft_5.83/en/LabelSoft.resources.dll unpack001/LabelSoft_5.83/zh-Hant/LabelSoft.resources.dll
Files
-
4fdfec28127474247cfece9a0236a45edfd18d57be499a401c8cad33b86b136a.rar
-
LabelSoft_5.83/LabelSoft.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LabelSoft_5.83/LabelSoft.exe.config.xml
-
LabelSoft_5.83/en/LabelSoft.resources.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 892KB - Virtual size: 891KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LabelSoft_5.83/readme.txt
-
LabelSoft_5.83/zh-Hant/LabelSoft.resources.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ