Behavioral task
behavioral1
Sample
clzljsq-v2.3/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
clzljsq-v2.3/新云软件.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
clzljsq-v2.3/材料重量计算器V2.3.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
clzljsq-v2.3/材料重量计算器V2.3.exe
Resource
win10v2004-20231222-en
General
-
Target
078536f74e78dd4e9055a017b9f36ba1
-
Size
437KB
-
MD5
078536f74e78dd4e9055a017b9f36ba1
-
SHA1
3144619129dc596eb0f94fc2ac17e529c700b72b
-
SHA256
788b6afba0f71ef71ada85b1797fc506e79dbe4f031f5355114a72e225b9bc51
-
SHA512
1b20bcda50b9c604c9f34218f7b06f0154410dee4c3cb2610387d071a80960b3be5dbd70ac9cbab8d3b509261c85a9a3de74620cb7f9ba10d5f07ce84df02ac3
-
SSDEEP
6144:xqQYfKJVUQUQMzoC9UBVpx3dv6f5fV7IKY6bSCG8OLgq7qLwaHJWok9AQSoQvvyu:xqXfkwQMz9SBVzdyAQpqeLw4WmjvofQ
Malware Config
Signatures
-
resource yara_rule static1/unpack001/clzljsq-v2.3/材料重量计算器V2.3.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/clzljsq-v2.3/材料重量计算器V2.3.exe
Files
-
078536f74e78dd4e9055a017b9f36ba1.rar
-
clzljsq-v2.3/新云软件.url.url
-
clzljsq-v2.3/材料重量计算器V2.3.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 350KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
clzljsq-v2.3/材料重量计算器说明(V2.3 2009.6.27).txt