LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
Behavioral task
behavioral1
Sample
2023最新税务规定.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2023最新税务规定.exe
Resource
win10v2004-20230703-en
Target
2023最新税务规定.exe
Size
2.6MB
MD5
e41feb1b7493c78140cf8f35417fa86b
SHA1
b3bd2a1a56191e74fc7edd007f1a36bff5106002
SHA256
1c54aa3a02a8b1fb870b31b7622fe65602b2e09fba96f57e760bef4d0f89fcf4
SHA512
9c3a20e34b4e2cef173678c15b852639db701d9f9416e75707457cd1821ffd2a293627d17648f21e2e8629377ace102265603397b3d566a717fe4e6cc2fca6b6
SSDEEP
49152:u1akoHNq0zz1xxIo07RCKWSsrP7RQjuDxV/kVWy1EwyNOKXyB7madr:YuA0VPwMNSclQ0kl1ZqOKCB7bF
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
2023最新税务规定.exe |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ