Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
关于省局设的三个准强制性公式-未解锁企业名单/未解锁成功企业名单-电脑版.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
关于省局设的三个准强制性公式-未解锁企业名单/未解锁成功企业名单-电脑版.exe
Resource
win10v2004-20231023-en
Target
关于省局设的三个准强制性公式-未解锁企业名单.rar
Size
304KB
MD5
9e9d25ea7871a5385d033c5ef8801650
SHA1
dfb8a31144873f37093e190a12afa121069ea803
SHA256
7a534fa3ffa409d1a55e6a3680c189ac20baf92afe67e9a819a0608ea52c5575
SHA512
755fe1f6eabaf33f9faf8d0bb20c2c8fe9bff5b4b9834d3278eaa9423177db21245c9000533b19e1bfd6f02e51ea254755eba7b67f7c708e99315057c6bb4122
SSDEEP
6144:DHpB8d6WdE5KJ2MyHZv4KSx2jQj37aR611qR/4EgcUblFqb:Dod6Wm22MyHZDSx2jQjWR6Bf6
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GlobalMemoryStatusEx
GetTickCount
WinExec
CreateProcessA
GetTempPathA
ExitProcess
HeapFree
VirtualFree
VirtualAlloc
LoadLibraryA
HeapAlloc
GetProcAddress
GetProcessHeap
FreeLibrary
IsBadReadPtr
GetModuleFileNameA
SizeofResource
VirtualProtect
WriteFile
lstrlenA
GetModuleHandleA
FreeResource
GetCommandLineA
Sleep
CreateFileMappingA
CopyFileA
GetLastError
CreateFileA
LockResource
CloseHandle
GetSystemInfo
LoadResource
FindResourceW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfA
MessageBoxA
��rJ���|�.�qd��<���O-g]?`��Y����$d�]#K.�*�p�_�*6�XY��>쪺�c�k�|F!>Lev�5�a��< �ĕ�Y�5�O@�/|��g�4���������YQ|��4�� 藦K=��P\l����N#����&}�_�ٯ@�k����Y�\m������z:%�� �2L"�K}������p~ܯ���%Q�`^��D��ع ���l�v��7yA����#�ztO}?�\f\�Gi]@���p�ZҽKS�i�PY.����켻r�~[�H�`��^��/y��bw����W�7�z�"H�_�� ��r(�x����\q���-&]:�B��`C:|0�B����X�lpﭏ75������rM9(�ӪzfO�!�4��p��d��9T*o��9ݖ,A��'��nG6�H�\Z o �P�D�@�D�T�(jgFh=�ƈ�D�_4� � @SDi}��Ozr�[�2������`%QH���N�" �X��wբ.����@4)9;l�T��+�6Մ���ܶ/Y�Z��HF<6��j�*A�,AO<>�k�hk��YCH�qp7����c�D�kY�eɑʵBQߡ��� ~��L��/��q�]f����8�k0��26Hʗ�tIE�#�3��"adp9�P��ɤN�yE��5�x�Ρt�@[�Gªŝ�pV�#1Ap���! �{���1��~���o=��V���ngp�Xc���n��c�^�Qqgҳ13�r1��?2� . �[���i�O~ܩ�d����l��Nj5���3�� ��K�5�]N��L/�Ozʲ�ﺧ7�XNJ���m����-��A��C��af��n=a�Pmf+W%I��}[�s�O3e��?�aZ#��-�؆�d���.�<�W�y��[붬�f��ޛ%��?|�����[��� �� #oN�g���H�#�E̐�dQ������a&1�����PcsV��̫�å�3ę�Q��&��0���n��4��R DgϽIo��{����!�Д�](aw]� R��?��.�6�5YD��S� gO6�������$�Z�L[���@9A5�3k���P3re�DS�v� ���Ps�A#]�z.|3# ��\~4�IJ�x���h��M�3Q��=Q��|�7��&��H5��Z� �|�����E�"L���:�\䍼���Z帯����T����� |Q)�ޜh�3ː�05H���_,�����!��=):n��T<e ^e��3�M��M�ͧ����O�����ЃK���Dڸ�Z���)��Cu /�C�� ւh�s��-�����+n��Ә)�c�.�x�ߏ���TT4�P��K����+��H���i��Ľy=���)� ̮�����RZ֕R��b�Q;��w�_ シ0�\�<.1m}�� on����ދ)�h��gk7<-�췁��w��G��*�ϓ(yX<�ÏP����B�x?�qw������R��:)�#�v�(�|]�wm�O�<|��N�=��9X�3�__|�|�=G�٭-B�A�{�����bf-B�Db� ����5�I`��c8�c�V��4�����t���R�#*cpٯ�I����E>������*-��^Z,w�'��8'>6/�!k�tț@�IO�s��\���(��7���*���y����b������̿TŰ�bw��y�^u]?�M��7�U�ح-I�bjfW��}sFU"p����7P��w�G�WS ����]~˜��R����یL��'�Y�y������,x�0�~=���L��}���Ώ����",��u� �Y�:�T�8� ܕ@\`�E�\^kw0N����)�jM�̯{S�v��J*�������W����%p��ʺ������t��<�V������W�-�K9�n��i�rKH~���k*YQcf~�*FL#�3��~�7t�f�!e���_���N�N��,a+��#�� N�^*jL[�,$d.�Ҩ=�cB�C�Xd1Uov�Z�?��&����eƮ��g��Ȥ�l�}�^-f��"���&S289ݞ�Yt9��8�9;6Y�{�O��sM�?��ym����t�1��W�؊P`��ק�i*I}*�Sn���2��<y��$�:��)��D����������6�4�1Z�*�U^yd� �5ӋMB"��oP�(�c�Ns �F�D=��h��=n ���N�J����_`I0���|P!��F ��'m`]�`a�VF�yn[��n�me&��{�/����S�Юd�f� zZ����RU0�E�v�V��{"w���s�o[G�4����c����V� S�ig#8dʛAH���D`Ν��d����(��x8�$�$�rA�u/�E^.2LRИ�ċ\6���>vi��h%�2��Y��bw��*CY���m_�>9�&��JO��5������u! ��bN��=ACLk�������-�n�%y���7F�uu� ��'�za���m&�����£�0����|����,0Th�9��"��NXY�8S�0�b�H��Z!�{K�ʒC1b����*$ MAA�?.�N��J���vQB���4�FX��S8#ёsn8V�Z�[ݝ�%(o2Ԏ_�!�R&��)_$�;��N�d�*(�J�� �sT�oCm���!�T�o�����^����u�F�R�c��xh�3�g%�%��/�����DM?+z�q�~����a�]UϚ��]9�����Rϩ�����aE���e̕�w�� �ؐ,2),n�r�\&E�OFh��4����a�n0�(��b4�]�I@���0��<��" ,�ezb4�E����Ռ9V�&�/�˪���{�!SZ�����ʵʏ�1�����`�Eo��㸾��,�.�=��������P��:�;�ޮV��1�F|n���s�R'�MAZ̝H��p��q���yO�)��t>*+Ɋ��FǢy)��������'�V��6ϗvr^�?�֬r�4z.��VѢ�L榴%���Tܶs���N��D��q#d�lv<�{��ʂ��i5~y�o�}���}v�Y��.d��G�Y��%{���� ��G�n_����]dޓ"YOc �{e"�?1�{��e�|Z���aW�R`(�;
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ