General

  • Target

    aa6c51b8c6cc4e575912db3aae1a492938278ca7d4a419da96ea043b82a6af32

  • Size

    7.4MB

  • MD5

    b108b5e20c549583b20581df19b1bc98

  • SHA1

    1d01cf940058f26f5bf98773ed9ec393bf5d686b

  • SHA256

    aa6c51b8c6cc4e575912db3aae1a492938278ca7d4a419da96ea043b82a6af32

  • SHA512

    c1e0ba86a72ccce02751121d14757c93e2229f807eea1d9a411ee420b39e1b1bbf36bd7bf97cb2a08cfa9e4f5dda4e9fb37f6529ede2da7433ca9fdee80a9ab3

  • SSDEEP

    98304:K1pwYxGh72cryCTsPzskEdgwz1vVhVHTxpfJD5SrUgRoWZ/mBwsb5mw0iJdz1vVV:sxGD5sZfwz5vVnQUk1BmVZdz5CMjZmlU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 36 IoCs

    Checks for missing Authenticode signature.

Files

  • aa6c51b8c6cc4e575912db3aae1a492938278ca7d4a419da96ea043b82a6af32
    .zip
  • 20230831/cis/release/Documents/Common/UpLoadFile/UpLoadFileHandler.ashx
  • 20230831/cis/release/Documents/DictConfig/BedEventDict/BedEventDictHandler.ashx
    .asp
  • 20230831/cis/release/Documents/DictConfig/NursingTemplateDict/NursingTemplateDictHandler.ashx
    .asp
  • 20230831/cis/release/Documents/DictConfig/SignsOptionDict/SignsOptionDictHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Orders/OrdersLabel/OrdersLabelHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Orders/WardPatOrders/WardPatOrdersHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Permissions/Permissions/PermissionsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/PersonInformation/NewBusiness/NewBusinessHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/AdmissionRecords/AdmissionRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/AutarRiskSheetrRcords/AutarRiskSheetrRcordsHandler.ashx
  • 20230831/cis/release/Documents/Records/BgTestRecords/BgTestRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/BloodSugarRecords/BloodSugarRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/CareRecords/CareRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/CatheterSlipRecords/CatheterSlipRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/ChildPressureSoreRecords/ChildPressureSoreRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/CrCareRecords/CrCareRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/CrFrmRecords/CrFrmRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/DaoNiaoMonitorRecords/DaoNiaoMonitorRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/DaoNiaoRiskRecords/DaoNiaoRiskRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/EducationAndHealth/EducationAndHealthHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/FallBedSoreRecords/FallBedSoreRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/FallScoreMoniRecords/FallScoreMoniRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/GCSRecords/GCSRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/GetFeiYanMoniRecords/GetFeiYanMoniRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/GetFeiYanRiskRecords/GetFeiYanRiskRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/GravidaRecords/GravidaRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/HealthEduRecords/HealthEduRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/IntensiveCareRecords/IntensiveCareRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/JingMaiMoniRecords/JingMaiMoniRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/JingMaiRecords/JingMaiRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/LifeSignleRecords/LifeSignleRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/NRSMoniRecords/NRSMoniRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/NRSRecords/NRSRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/NasalFeedingRecords/NasalFeedingRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/NewBornRecords/NewBornRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/NewBornTransferRecords/NewBornTransferRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/NormalCareRecords/NormalCareRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/NormalPressureSoreRecords/NormalPressureSoreRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/NursingSafetyRecords/NursingSafetyRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/OPFeiYanMoniRecords/OPFeiYanMoniRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/OPFeiYanRiskRecords/OPFeiYanRiskRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/ObstetricCareRecords/ObstetricCareRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/OperPatientBeforRecords/OperPatientBeforRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/OperationMasterRecords/OperationMasterRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/OperationMonitRecords/OperationMonitRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/OperationNursingRecords/OperationNursingRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/OperationTransferRecords/OperationTransferRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/PICCMaintainRecords/PICCMaintainRecordshandler.ashx
  • 20230831/cis/release/Documents/Records/PainAssessmentNewRecords/PainAssessmentNewRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PainAssessmentRecords/PainAssessmentRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PatsFrmRecords/PatsFrmRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PediatricsAdmissionRecords/PediatricsAdmissionRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/PeripherallyCentralRecords/PeripherallyCentralRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/PersonalizedCareNeedsRecords/PersonalizedCareNeedsRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PipePredictMonitorRecords/PipePredictMonitorRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PressureMonitoringRecords/PressureMonitoringRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PressureScoreMoniRecords/PressureScoreMoniRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/PressureSoreRecords/PressureSoreRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/RiskRecords/RiskRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/RollOverRecords/RollOverRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/SelfCareRecords/SelfCareRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/SelfGradeCount/SelfGradeCountHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/SpecialPainNursing/SpecialPainNursingHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/TransferRecords/TransferRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/TrimesterAbortionRecords/TrimesterAbortionRecordsHandler.ashx
  • 20230831/cis/release/Documents/Records/VitalSignsRecords/VitalSignsRecordsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Records/YINGCHAN/YINGCHANHandler.ashx
    .asp
  • 20230831/cis/release/Documents/RecordsZY/RecordsZYCZ/RecordsZYCZHandler.ashx
    .asp
  • 20230831/cis/release/Documents/RecordsZY/RecordsZYMain/RecordsZYMainHandler.ashx
  • 20230831/cis/release/Documents/RecordsZY/RecordsZYXG/RecordsZYXGHandler.ashx
  • 20230831/cis/release/Documents/Report/AssayReport/assayReportHandler.ashx
  • 20230831/cis/release/Documents/Report/CheckResult/CheckResultHandler.ashx
  • 20230831/cis/release/Documents/Report/ConditionReport/ConditionReportHandler.ashx
  • 20230831/cis/release/Documents/Report/Examine/ExamineHandler.ashx
  • 20230831/cis/release/Documents/Signs/TempChart/TempChartHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Signs/WardSigns/WardSignsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Wards/DischargedInfo/DischargedInfoHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Wards/PDAErrorRate/PDAErrorRateHandler.ashx
  • 20230831/cis/release/Documents/Wards/PDAUsage/PDAUsageHandler.ashx
  • 20230831/cis/release/Documents/Wards/PatientBands/PatientBandsHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Wards/PatientList/PatientListHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Wards/Shift/ShiftHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftCountByClasses/ShiftCountByClassesHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftCountByDate/ShiftCountByDateHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftCountByNurse/ShiftCountByNurseHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftDeptDictionary/ShiftDeptDictionaryHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftDictionary/ShiftDictionaryHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftGroupDictionary/ShiftGroupDictionaryHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftNurseOrder/ShiftNurseOrderHandler.ashx
    .asp
  • 20230831/cis/release/Documents/Work/ShiftTable/ShiftTableHandler.ashx
    .asp
  • 20230831/cis/release/Framework/Login/LoginHandler.ashx
    .asp
  • 20230831/cis/release/Framework/Module/ModuleHandler.ashx
    .asp
  • 20230831/cis/release/Global.asax
  • 20230831/cis/release/Lib/CoreLab.Data.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/CoreLab.Oracle.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Devart.Data.Oracle.Vs.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Devart.Data.Oracle.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Devart.Data.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Iesi.Collections.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/NHibernate.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Newtonsoft.Json.xml
    .xml
  • 20230831/cis/release/Lib/Nurse.CisServer.Framework.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Nurse.CisServer.Public.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Nurse.Framework.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Oracle.DataAccess.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/Sybase.Data.AseClient.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/log4net.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/Lib/mHealth.Generic.Utils.xml
    .xml
  • 20230831/cis/release/Lib/mHealth.Generic.XML
    .xml
  • 20230831/cis/release/Lib/sybdrvado115a.dll
    .dll windows x86

    87b5a2956740ebebbc1d01d23095292c


    Headers

    Imports

    Exports

    Sections

  • 20230831/cis/release/Lib/sybdrvado20.dll
    .dll windows x86

    94acaebc0fb89fc9baf1aae0ff75cdec


    Headers

    Imports

    Exports

    Sections

  • 20230831/cis/release/Lib/sybdrvssl.dll
    .dll windows x86

    aeafa46d26e29676f22812b0311bb162


    Headers

    Imports

    Exports

    Sections

  • 20230831/cis/release/MobileNurse/BloodTransfusion/BloodTransfusionHandler.ashx
  • 20230831/cis/release/MobileNurse/Login/LoginHandler.ashx
  • 20230831/cis/release/MobileNurse/Orders/OrdersLabel/OrdersLabelHandler.ashx
    .asp
  • 20230831/cis/release/MobileNurse/PatInfo/PatInfoHandler.ashx
  • 20230831/cis/release/MobileNurse/Records/AdmissionRecords/AdmissionRecordsHandler.ashx
  • 20230831/cis/release/MobileNurse/Records/AutarRiskRcords/AutarRiskRcordsHandler.ashx
  • 20230831/cis/release/MobileNurse/Records/FallDownRecords/FallDownRecordsHandler.ashx
  • 20230831/cis/release/MobileNurse/Records/NursingRecords/NursingRecordsHandler.ashx
    .asp
  • 20230831/cis/release/MobileNurse/Records/PressureRecords/PressureRecordsHandler.ashx
  • 20230831/cis/release/MobileNurse/Records/SelfCareRecords/SelfCareRecordsHandler.ashx
  • 20230831/cis/release/MobileNurse/Records/TumbleRecords/TumbleRecordsHandler.ashx
  • 20230831/cis/release/MobileNurse/Report/Exam/ExamHandler.ashx
  • 20230831/cis/release/MobileNurse/Report/Test/TestHandler.ashx
  • 20230831/cis/release/MobileNurse/Signs/TempChart/TempChartHandler.ashx
  • 20230831/cis/release/MobileNurse/Signs/WardsSigns/WardsSignsHandler.ashx
  • 20230831/cis/release/Public/ButtonInfo/ButtonInfoHandler.ashx
    .asp
  • 20230831/cis/release/Public/DeptInfo/DeptInfoHandler.ashx
    .asp
  • 20230831/cis/release/Public/KyLogin/KyLoginHandler.ashx
    .asp
  • 20230831/cis/release/Public/ModuleInfo/ModuleInfoHandler.ashx
    .asp
  • 20230831/cis/release/Public/PassChange/PassChangeHandler.ashx
    .asp
  • 20230831/cis/release/Public/PassWordChange/PassWordChangeHandler.ashx
    .asp
  • 20230831/cis/release/Public/PassWordReset/PassWordResetHandler.ashx
    .asp
  • 20230831/cis/release/Public/Push/PushHandler.ashx
  • 20230831/cis/release/Public/RoleInfo/RoleInfoHandler.ashx
    .asp
  • 20230831/cis/release/Public/Template/TemplateHandler.ashx
    .asp
  • 20230831/cis/release/Public/ToolBarInfo/ToolBarInfoHandler.ashx
    .asp
  • 20230831/cis/release/Public/UsersInfo/UsersInfoHandler.ashx
    .asp
  • 20230831/cis/release/Public/WardInfo/WardInfoHandler.ashx
    .asp
  • 20230831/cis/release/Web.config
    .xml
  • 20230831/cis/release/bin/Devart.Data.Oracle.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Devart.Data.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Newtonsoft.Json.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Newtonsoft.Json.xml
    .xml
  • 20230831/cis/release/bin/Nurse.CisServer.Documents.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Nurse.CisServer.Documents.pdb
  • 20230831/cis/release/bin/Nurse.CisServer.Framework.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Nurse.CisServer.Framework.pdb
  • 20230831/cis/release/bin/Nurse.CisServer.MobileNurse.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Nurse.CisServer.MobileNurse.pdb
  • 20230831/cis/release/bin/Nurse.CisServer.Public.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Nurse.CisServer.Public.pdb
  • 20230831/cis/release/bin/Nurse.CisServer.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/Nurse.CisServer.pdb
  • 20230831/cis/release/bin/ShareGeneric.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/ShareGeneric.pdb
  • 20230831/cis/release/bin/Sybase.Data.AseClient.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/log4net.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/mHealth.Generic.Utils.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/mHealth.Generic.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/mHealth.Model.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cis/release/bin/mHealth.Model.pdb
  • 20230831/cis/release/log4net.config
  • 20230831/cli/Nurse.Framework.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cli/Nurse.Public.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cli/ShareGeneric.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cli/mHealth.Model.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 20230831/cli/ϵͳ.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections