Errors

Reason
office: error reading record

General

  • Target

    13b8e92ed6a4b65010183cceb6ea0fd9

  • Size

    15.9MB

  • MD5

    13b8e92ed6a4b65010183cceb6ea0fd9

  • SHA1

    46e579325bdc6229100634341347fec675817146

  • SHA256

    e3bbf814e63e5b3104f1d15e9e3a805fec83d5814ffcb627f2af1b7dfda0ccce

  • SHA512

    72b8c5d9dbad3ea3e1a3930a4fb08ee20dc5423cb6f8c1965d81c2140023961d35d780885846b6d4b04fab1b09df1fcdd4cf2ed0333aed80252ffd14ae241aeb

  • SSDEEP

    196608:C1ihqZxcfgq6nJsB+sAGshkeUxtfSJ98UwEO/mj2hwwfILpD6DPSK6YLx3UinqeC:C1ihqxKQWvtHkJcwdDDKx3v4FDWh0EX6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 26 IoCs

    Checks for missing Authenticode signature.

Files

  • 13b8e92ed6a4b65010183cceb6ea0fd9
    .rar
  • SETUP1.CAB
    .cab
  • ACMSETUP.EXE
    .exe windows:1 windows x86 arch:x86

    d057661fa0c57da4e10eca58cdf1dc72


    Headers

    Imports

    Sections

  • ACMSETUP.HLP
  • MSSETUP.DLL
    .dll windows:1 windows x86 arch:x86

    9f91a6d65da7fff6bdb420d66d40fac0


    Headers

    Imports

    Exports

    Sections

  • MSVCRT.DLL
    .dll windows:4 windows x86 arch:x86

    8d26773106ed39fbb89a157d19d8aa89


    Headers

    Imports

    Exports

    Sections

  • MSVCRT40.DLL
    .dll windows:4 windows x86 arch:x86

    57259dcda30c27e977785c33a8441434


    Headers

    Imports

    Exports

    Sections

  • SETUP2.LST
  • WIZSET32.DLL
    .dll windows:4 windows x86 arch:x86

    a6ddee4715543289a7e54b780402c0c5


    Headers

    Imports

    Exports

    Sections

  • f0000007
    .dll windows:4 windows x86 arch:x86

    28b659576236be75a4bbcbfa9113e470


    Headers

    Imports

    Exports

    Sections

  • f0000008
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • f0000009
  • f0000010
  • f0000011
    .jpg
  • f0000012
    .gif
  • f0000013
  • f0000014
  • f0000015
  • f0000016
  • f0000017
  • f0000018
  • f0000019
  • f0000020
  • f0000021
  • f0000022
  • f0000023
  • f0000024
  • f0000025
  • f0000026
  • f0000027
  • f0000028
  • f0000029
  • f0000030
  • f0000031
  • f0000032
  • f0000033
  • f0000034
    .jpg
  • f0000035
    .jpg
  • f0000036
    .jpg
  • f0000037
  • f0000038
  • f0000039
  • f0000040
  • f0000041
  • f0000042
  • f0000043
  • f0000044
  • f0000045
  • f0000046
  • f0000047
  • f0000048
  • f0000049
  • f0000050
  • f0000051
  • f0000052
  • f0000053
    .jpg
  • f0000054
    .gif
  • f0000055
  • f0000056
  • f0000057
  • f0000058
    .jpg
  • f0000059
  • f0000060
  • f0000061
  • f0000062
    .jpg
  • f0000063
  • f0000064
  • f0000065
  • f0000066
  • f0000067
    .exe windows:4 windows x86 arch:x86

    dde433ca7c485c9f39c10c12cc42081f


    Headers

    Imports

    Sections

  • f0000068
  • f0000069
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7b4856b28ca7023dfd1a515a4e9a904


    Headers

    Imports

    Exports

    Sections

  • f0000070
    .dll regsvr32 windows:4 windows x86 arch:x86

    50ccb1d881ea89a41a10cced45c79649


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • f0000071
    .exe windows:4 windows x86 arch:x86

    1ae4785b1e1a2a20eaccdbff5aeaccce


    Headers

    Imports

    Sections

  • f0000072
    .dll regsvr32 windows:4 windows x86 arch:x86

    d7112004d3c345a2ed68d74bba3d37f5


    Headers

    Imports

    Exports

    Sections

  • f0000073
    .dll regsvr32 windows:4 windows x86 arch:x86

    8f50e2228a97d0224410529663a78a82


    Headers

    Imports

    Exports

    Sections

  • f0000074
  • f0000075
  • f0000076
  • f0000077
    .exe windows:4 windows x86 arch:x86

    23dab55e2a25210a84f0bbc9deb32bff


    Headers

    Imports

    Sections

  • f0000078
  • f0000079
    .exe windows:5 windows x86 arch:x86

    cfb8ad251fa98c8c891304e231aa1ebf


    Headers

    Imports

    Sections

  • f0000080
    .xls windows office2003
  • f0000081
    .xls windows office2003
  • f0000082
    .xls windows office2003
  • f0000083
    .xls windows office2003
  • f0000084
    .xls windows office2003
  • f0000085
    .exe windows:4 windows x86 arch:x86

    1ae4785b1e1a2a20eaccdbff5aeaccce


    Headers

    Imports

    Sections

  • f0000086
    .exe windows:4 windows x86 arch:x86

    1ae4785b1e1a2a20eaccdbff5aeaccce


    Headers

    Imports

    Sections

  • f0000087
    .exe windows:4 windows x86 arch:x86

    1ae4785b1e1a2a20eaccdbff5aeaccce


    Headers

    Imports

    Sections

  • f0000088
    .exe windows:4 windows x86 arch:x86

    1ae4785b1e1a2a20eaccdbff5aeaccce


    Headers

    Imports

    Sections

  • f0000089
    .rar
  • hzpy表.DBF
  • picf.FPT
  • picf.dbf
  • xy.dbf
  • xy2.dbf
  • 代码库.CDX
  • 代码库.dbf
  • 代课日志.dbf
  • 固定课库.dbf
  • 场地安排表.FPT
  • 场地安排表.dbf
  • 场地安排表2.DBF
  • 场地安排表2.FPT
  • 场地安排表3.DBF
  • 场地安排表3.FPT
  • 场地安排表4.DBF
  • 场地安排表4.FPT
  • 场地安排表5.DBF
  • 场地安排表5.FPT
  • 场地库.cdx
  • 场地库.dbf
  • 学生连堂课形式表.FPT
  • 学生连堂课形式表.dbf
  • 年级临时表.dbf
  • 年级名称表.DBF
  • 年级开设课程表.dbf
  • 总课表库.dbf
  • 排课大师数据库.dbc
  • 排课大师数据库.dct
  • 排课大师数据库.dcx
  • 排课结果小计表.DBF
  • 排课结果小计表.FPT
  • 教师课程表.dbf
  • 教师课程表2.DBF
  • 教师课程表3.DBF
  • 教师课程表4.DBF
  • 教师课程表5.DBF
  • 教师连堂课形式表.FPT
  • 教师连堂课形式表.dbf
  • 时间限制范围表.FPT
  • 时间限制范围表.dbf
  • 某类名称表.DBF
  • 某组名称表.DBF
  • 班级课程表.dbf
  • 班级课程表2.DBF
  • 班级课程表3.DBF
  • 班级课程表4.DBF
  • 班级课程表5.DBF
  • 课时安排库.FPT
  • 课时安排库.dbf
  • 课时安排库临时表.FPT
  • 课时安排库临时表.dbf
  • 课时安排辅助表.dbf
  • 课程指定教师表.dbf
  • 限制范围名称表.dbf
  • f0000090
    .rar
  • hzpy表.DBF
  • picf.FPT
  • picf.dbf
  • xy2.dbf
  • 代课日志.dbf
  • 场地安排表.FPT
  • 场地安排表.dbf
  • 场地安排表2.DBF
  • 场地安排表2.FPT
  • 场地安排表3.DBF
  • 场地安排表3.FPT
  • 场地安排表4.DBF
  • 场地安排表4.FPT
  • 场地安排表5.DBF
  • 场地安排表5.FPT
  • 学生连堂课形式表.FPT
  • 学生连堂课形式表.dbf
  • 年级临时表.dbf
  • 年级名称表.DBF
  • 年级开设课程表.dbf
  • 排课结果小计表.DBF
  • 排课结果小计表.FPT
  • 教师课程表.dbf
  • 教师课程表2.DBF
  • 教师课程表3.DBF
  • 教师课程表4.DBF
  • 教师课程表5.DBF
  • 教师连堂课形式表.FPT
  • 教师连堂课形式表.dbf
  • 时间限制范围表.FPT
  • 时间限制范围表.dbf
  • 某类名称表.DBF
  • 某组名称表.DBF
  • 班级课程表.dbf
  • 班级课程表2.DBF
  • 班级课程表3.DBF
  • 班级课程表4.DBF
  • 班级课程表5.DBF
  • 课程指定教师表.dbf
  • 限制范围名称表.dbf
  • f0000091
    .xls windows office2003
  • f0000092
    .xls windows office2003
  • f0000093
    .xls windows office2003
  • f0000094
    .xls windows office2003
  • f0000095
    .xls windows office2003
  • f0000096
    .xls windows office2003
  • f0000097
  • f0000098
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • f0000099
  • f0000100
    .dll windows:4 windows x86 arch:x86

    6f40a239e0d62e980566af3b3520b995


    Headers

    Imports

    Exports

    Sections

  • f0000101
    .exe windows:4 windows x86 arch:x86

    b91d01f07ed837cead30759d7122da59


    Headers

    Imports

    Exports

    Sections

  • f0000102
    .dll regsvr32 windows:4 windows x86 arch:x86

    b07da0874b1f490093ddaa145e84d116


    Headers

    Imports

    Exports

    Sections

  • f0000103
    .dll windows:4 windows x86 arch:x86

    105a34c3b3ecaf6803be201e74c83cf4


    Headers

    Imports

    Exports

    Sections

  • f0000104
    .exe windows:4 windows x86 arch:x86

    21b0be9e9c79dd1b598e3cb319374dd2


    Headers

    Imports

    Sections

  • f0000105
  • f0000106
  • f0000107
  • f0000108
  • f0000109
  • f0000110
  • f0000111
  • f0000112
  • f0000113
  • f0000114
  • f0000115
  • f0000116
  • f0000117
  • f0000118
  • f0000119
  • f0000120
  • f0000121
  • f0000122
  • f0000123
  • f0000124
  • f0000125
  • f0000126
  • f0000127
  • f0000128
  • f0000129
  • f0000130
  • f0000131
  • f0000132
  • f0000133
  • f0000134
  • f0000135
  • f0000136
  • f0000137
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • f0000138
    .chm
  • f0000139
  • f0000140
  • f0000141
  • f0000142
  • f0000143
  • odbckey.inf
  • odbcstf.dll
    .dll windows:4 windows x86 arch:x86

    5514db4b207087e90009b344ff1804b2


    Headers

    Imports

    Exports

    Sections

  • setup.exe
  • setup.inf
  • setup.ini
  • setup.lst
  • setup.stf
  • setup.tdf
  • 下载说明.htm
    .html .js polyglot