Static task
static1
Behavioral task
behavioral1
Sample
TTi校正软件/LipCalibrate.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
TTi校正软件/LipCalibrate.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
TTi校正软件/gaixie kb/LipCalibrate数据.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
TTi校正软件/gaixie kb/LipCalibrate数据.exe
Resource
win10v2004-20230915-en
General
-
Target
83a8b7c095c99d79344ee15d8463537512125b678cab7e57a895a3cffffe7c0b
-
Size
1.6MB
-
MD5
e3e85cd116976f113827383abbf02246
-
SHA1
ef614ad291a22f798c4d7f7629002715989c39bc
-
SHA256
83a8b7c095c99d79344ee15d8463537512125b678cab7e57a895a3cffffe7c0b
-
SHA512
c695f82f5c1e381961c48a65229ebd9522ca2accb1bdb7897ba244ea152d7497bf93e179d6825ece0db9a46fcc5a8d0554d2b0cd8379bca9e36f03e7d3280816
-
SSDEEP
24576:HowaY3WoHqeFF5MPzraOqWCt41M6yhvmBEkr63DIAtjkr69khVDHG7L:HCGfHZMPzDqW9ytmBPr63jtAr6q5S
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TTi校正软件/LipCalibrate.exe unpack001/TTi校正软件/gaixie kb/LipCalibrate数据.exe
Files
-
83a8b7c095c99d79344ee15d8463537512125b678cab7e57a895a3cffffe7c0b.rar
-
TTi校正软件/Calibrate/ChannelMap.dat
-
TTi校正软件/Calibrate/Dev1_GbCBData_Sta1.dat
-
TTi校正软件/Calibrate/Dev1_GbCBData_Sta2.dat
-
TTi校正软件/Calibrate/MTSchFile.dat
-
TTi校正软件/Calibrate/SysIniFile.dat
-
TTi校正软件/LipCalibrate.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TTi校正软件/System/Config/AppointOptMode.dat
-
TTi校正软件/System/Config/BoxMode.dat
-
TTi校正软件/System/Config/CNSData.dat
-
TTi校正软件/System/Config/CanTypeSet.dat
-
TTi校正软件/System/Config/Config.cfg
-
TTi校正软件/System/Config/IPConfigSet.dat
-
TTi校正软件/System/Config/OperationMode.dat
-
TTi校正软件/System/Config/RealLimitSet.dat
-
TTi校正软件/System/Config/RecoverySet.dat
-
TTi校正软件/System/Config/SystemSet.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210710.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210711.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210712.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210713.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210714.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210715.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210716.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210717.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210718.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210720.dat
-
TTi校正软件/System/Log/1-1/CNSLog_20210724.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210710.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210711.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210712.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210715.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210716.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210717.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210718.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210720.dat
-
TTi校正软件/System/Log/1-2/CNSLog_20210724.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210710.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210711.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210712.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210715.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210716.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210717.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210718.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210720.dat
-
TTi校正软件/System/Log/1-3/CNSLog_20210724.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210710.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210711.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210712.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210715.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210716.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210717.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210718.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210720.dat
-
TTi校正软件/System/Log/1-4/CNSLog_20210724.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210710.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210711.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210712.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210715.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210716.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210717.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210718.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210720.dat
-
TTi校正软件/System/Log/2-1/CNSLog_20210724.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210710.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210711.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210712.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210715.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210716.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210717.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210718.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210720.dat
-
TTi校正软件/System/Log/2-2/CNSLog_20210724.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210710.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210711.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210712.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210715.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210716.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210717.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210718.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210720.dat
-
TTi校正软件/System/Log/2-3/CNSLog_20210724.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210710.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210711.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210712.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210715.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210716.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210717.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210718.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210720.dat
-
TTi校正软件/System/Log/2-4/CNSLog_20210724.dat
-
TTi校正软件/System/Log/CDNG.dat
-
TTi校正软件/System/Log/CONTACTERROR.dat
-
TTi校正软件/System/Log/ErrorLog.dat
-
TTi校正软件/System/Log/InspectCnt.dat
-
TTi校正软件/System/Log/NGCOUNT.dat
-
TTi校正软件/System/Log/OCV.dat
-
TTi校正软件/System/MapsFile.DAT
-
TTi校正软件/System/Temporary/Tempfile_1.DAT
-
TTi校正软件/System/Temporary/Tempfile_1.~DAT
-
TTi校正软件/System/Temporary/Tempfile_2.DAT
-
TTi校正软件/System/Temporary/Tempfile_2.~DAT
-
TTi校正软件/System/Temporary/Tempfile_3.DAT
-
TTi校正软件/System/Temporary/Tempfile_3.~DAT
-
TTi校正软件/System/Temporary/Tempfile_4.DAT
-
TTi校正软件/System/Temporary/Tempfile_4.~DAT
-
TTi校正软件/System/Temporary/Tempfile_5.DAT
-
TTi校正软件/System/Temporary/Tempfile_5.~DAT
-
TTi校正软件/System/Temporary/Tempfile_6.DAT
-
TTi校正软件/System/Temporary/Tempfile_6.~DAT
-
TTi校正软件/System/Temporary/Tempfile_7.DAT
-
TTi校正软件/System/Temporary/Tempfile_7.~DAT
-
TTi校正软件/System/Temporary/Tempfile_8.DAT
-
TTi校正软件/System/Temporary/Tempfile_8.~DAT
-
TTi校正软件/System/Type/0.tpe
-
TTi校正软件/System/Type/ProductSet.dat
-
TTi校正软件/gaixie kb/Calibrate/ChannelMap.dat
-
TTi校正软件/gaixie kb/Calibrate/SysIniFile.dat
-
TTi校正软件/gaixie kb/LipCalibrate数据.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ