Static task
static1
Behavioral task
behavioral1
Sample
安全隐患整改项目/安全隐患整改项目.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
安全隐患整改项目/安全隐患整改项目.exe
Resource
win10v2004-20230703-en
General
-
Target
安全隐患整改项目.zip
-
Size
453KB
-
MD5
66eb12a7175790214885a0e936df8504
-
SHA1
6954f73b7fc69acacdb9e495fda2672c57c8d132
-
SHA256
fcba6c2aff2a034a1ac6ae3223dbfd366165404984ee0381341277fb7ea7c87c
-
SHA512
0f9cb25f13a7e5eff5cef76034fc7217f25ad570956358258c05ae449c1ef9bb7a41f140b1198717a15778fafe5ccb1dc5375bbe88a6b5a7cc1b546af9172aca
-
SSDEEP
12288:oGy2/LsnXUvfUPgrxhbPkQayPaK8UIFnplh37q4v:oz2Trv2UxhTBSKIDlh37L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/安全隐患整改项目/安全隐患整改项目.exe
Files
-
安全隐患整改项目.zip.zip
-
安全隐患整改项目/安全隐患整改项目.exe.exe windows x86
efabbc75a6445136f9c3983eaff9c04a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 375KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 429KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE