个人所得税抵扣填报指南（请按指南填报抵扣）[.]rar

Resubmissions

20/07/2023, 02:57

230720-dfmpcach8y 10

07/02/2023, 16:04

230207-th713afg2x 10

Sharing

Copy URL Twitter E-mail

General

Target

个人所得税抵扣填报指南（请按指南填报抵扣）.rar
Size

339KB
MD5

cedcea348cba08cec170211e7ffd07c9
SHA1

40cb0ae8458ca975f8bea17cf3de03193fb41c11
SHA256

ef9c75280ec77fc591d54741c0eb6ed68d7bcf2816049022bc856980e2b0efa5
SHA512

8a7af1634e9018f2b2aeb6b4e789038292e14dd328ff2bfd584d7f4619fcd001605d538af26e9a850d2634778e717c36535deafa53490367c72faf036d2f6854
SSDEEP

6144:vG7n2luls0lkCXVn8Ih8m1mQOwbgNpIO3h9tGHP87Yt3Z:vG73lFl83cwbNpIO3h9gPkYt3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/个人所得税抵扣填报指南（请按指南填报抵扣）/0.000000fdsfffdddddffddaffffffvvvvaergqh5bqbqv34
unpack001/个人所得税抵扣填报指南（请按指南填报抵扣）/tijian/hezuo.exe

Files

个人所得税抵扣填报指南（请按指南填报抵扣）.rar
.rar
个人所得税抵扣填报指南（请按指南填报抵扣）/0.000000fdsfffdddddffddaffffffvvvvaergqh5bqbqv34
.dll windows x64

376f17c483a08d322404d3c4a8f0a5ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WinExec
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

__C_specific_handler
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_initialize_narrow_environment
_cexit

Exports

Exports

HNSJox

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
个人所得税抵扣填报指南（请按指南填报抵扣）/tijian/hezuo.exe
.exe windows x64

1b9d48b9df2181ca5c23ba0508ed1a97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualProtect
VirtualFree
VirtualAlloc
EnumResourceTypesA
WaitForSingleObject
Sleep
SetEvent
GetCurrentThread
CloseHandle
CreateThread
ResetEvent
AddVectoredExceptionHandler
CreateEventA
GetLastError
GetCurrentProcess
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualQuery
VirtualProtectEx
VirtualQueryEx
SetLastError
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess

msvcp140

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ

vcruntime140

memcpy
__std_exception_destroy
_CxxThrowException
__C_specific_handler
memset
__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
ftell
fopen
fread
rewind
fseek
fclose
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_cexit
_initterm_e
_set_app_type
_initterm
__p___argc
_c_exit
_seh_filter_exe
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_initialize_narrow_environment
_configure_narrow_argv
_exit
__p___argv
_get_initial_narrow_environment
exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_callnewh
_set_new_mode
malloc

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
个人所得税抵扣填报指南（请按指南填报抵扣）/tijian/updatetest.ini
个人所得税抵扣填报指南（请按指南填报抵扣）/tijian/个人所得随抵扣申报指南（请按照指南申请个税抵扣）.docx
.docx office2007
个人所得税抵扣填报指南（请按指南填报抵扣）/个人所得随抵扣申报指南（请按照指南申请个税抵扣）.docx.lnk
.lnk
个人所得税抵扣填报指南（请按指南填报抵扣）/什么情形下扣缴义务人需要进行个人所得税扣缴申报.pdf
.pdf

Resubmissions

Sharing

General

Malware Config

Signatures

Files

376f17c483a08d322404d3c4a8f0a5ce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 408B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 24B

1b9d48b9df2181ca5c23ba0508ed1a97

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1KB - Virtual size: 1KB

.detourc Size: 8KB - Virtual size: 8KB

.detourd Size: 512B - Virtual size: 24B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 408B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 24B

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1KB - Virtual size: 1KB

.detourc
Size: 8KB - Virtual size: 8KB

.detourd
Size: 512B - Virtual size: 24B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB