Static task
static1
Behavioral task
behavioral1
Sample
税务行政处罚事项告知书/6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
税务行政处罚事项告知书/6.exe
Resource
win10v2004-20230703-en
General
-
Target
4a04d3d39c6e6eddc54cac4dcb33b62ef774c8c3ec436b2c8f2c7c5da6b19025
-
Size
453KB
-
MD5
a298f40ef3d98c8bc3f135a426f751bb
-
SHA1
7e2d83b548e6263b421da2a4b3949ddedcbf07ca
-
SHA256
4a04d3d39c6e6eddc54cac4dcb33b62ef774c8c3ec436b2c8f2c7c5da6b19025
-
SHA512
52972989f03340a1eab4051dadd643409d4b13f8f22ffb3e152df008eb0f3ea2d42cc0bfd1b4b25174cef110c2051e21eedee6fdf33c3d06d0f235594695890f
-
SSDEEP
12288:LGy2/LsnXUvfUPgrxhbPkQayPaK8UINFdx99nvbLGHv14M:Lz2Trv2UxhTBSKIf19njLGHd4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/税务行政处罚事项告知书/6.exe
Files
-
4a04d3d39c6e6eddc54cac4dcb33b62ef774c8c3ec436b2c8f2c7c5da6b19025.zip
-
税务行政处罚事项告知书/6.exe.exe windows x86
efabbc75a6445136f9c3983eaff9c04a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 374KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE