Static task
static1
Behavioral task
behavioral1
Sample
最新活动公告方案_3u.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
最新活动公告方案_3u.exe
Resource
win10v2004-20230621-en
General
-
Target
最新活动公告方案_3u.exe
-
Size
192KB
-
MD5
1751f5afa4079410f73be4cf58b7aaa4
-
SHA1
ea89218e4d10782119fa60cba3c10535288b8fb0
-
SHA256
a5093ecd4f3374c8ea691ac13f73c9797c9d36844e68a47ac4a0b92cee25cc91
-
SHA512
58f46daa09a3492c0daeeb9ee36e9d52c0445fe3443f80879a434f1789774e470c15084ae983e46283097a65ebe819fb90baaf907ccc36b92d0e69dd6497b8be
-
SSDEEP
3072:YJ61yI4mbHcS8UbC8Y9LNUBHd2LbAKRtJ2AAaHyRPg5HG:YJmyI4qh/fpfJA/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 最新活动公告方案_3u.exe
Files
-
最新活动公告方案_3u.exe.exe windows x64
8ec73af666d8ab1313ae3fe71474b4c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateFileA
WriteFile
CloseHandle
GetModuleFileNameA
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
Sleep
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetFileAttributesA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapSize
HeapValidate
IsBadReadPtr
GetModuleFileNameW
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
GetCurrentThreadId
FlsAlloc
FlsFree
SetLastError
GetStdHandle
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
HeapAlloc
HeapReAlloc
HeapQueryInformation
HeapFree
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ