General

  • Target

    12X.rar

  • Size

    23.1MB

  • MD5

    d883906ad103ded4eab29bece4111c64

  • SHA1

    d228d0709c536cc8dabab7cf5d6e01cb9d0bca82

  • SHA256

    e9ece01a6eca9300135fb86e026d112f3a225ab7f7dc7ee3b84db5a7a09c6255

  • SHA512

    aaeb82e3e1b2f7f79b0fc13440f496b3818f0f31acc3a2f693917fed0bc04cdf6898ce21927c9a4f6c06652b48d3efb08fe36b1497546581ace4afbc3fa54562

  • SSDEEP

    393216:GtYt+BV9pUEGE8ginrE3uLygYL8G9cKK5R54BSMt0eN5J5xqlic1ejtoaAOg8TU3:GtYYwW8giI+eF9qR5US2J5xVcAt6cUv/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12X.rar
    .rar
  • [sus]MicrosoftOffice.exe.vir
    .exe windows:6 windows x64 arch:x64

    4035d2883e01d64f3e7a9dccb1d63af5


    Headers

    Imports

    Sections

  • mal.exe.vir
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • 淘宝采集下单VV28.exe.vir
    .exe windows:5 windows x86 arch:x86

    2445a1579d4d5f299bc3f7de46f673d6


    Headers

    Imports

    Exports

    Sections