Static task
static1
Behavioral task
behavioral1
Sample
365防水墙系统介绍.v2.3.ppt.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
365防水墙系统介绍.v2.3.ppt.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
365防水墙系统安装包.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
365防水墙系统安装包.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
3f1fe03eff96cd3f37ece264cb5731ee
-
Size
8.7MB
-
MD5
3f1fe03eff96cd3f37ece264cb5731ee
-
SHA1
95a8ef88aacce796a8e5b213e2db3742b2f84105
-
SHA256
adeb5a150f244813a22a18e2d5609d3399decda08c0949de13df423d1e93c27e
-
SHA512
7281df6bb8a614469cc035c93d1224c040543fa28bdf124513cd4470e4a61365867c108b3864304334ca88208b71395b0d51c9b6505eb64f2baeb95ffc75c1de
-
SSDEEP
196608:XELx9OrQpf5dnA6AkoOcu2pciTh4dYoi+lF143Alum:UCqRpAGoh/akEYL0v
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/365防水墙系统介绍.v2.3.ppt.exe unpack001/365防水墙系统安装包.exe
Files
-
3f1fe03eff96cd3f37ece264cb5731ee.rar
-
365防水墙系统介绍.v2.3.ppt.exe.exe windows:4 windows x86 arch:x86
cef5eaf8366c8c6efcfa6fb74c97cdaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetTimeZoneInformation
GetConsoleCP
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
RaiseException
HeapReAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetVersionExW
LocalFileTimeToFileTime
SetErrorMode
GetCurrentDirectoryW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
SystemTimeToFileTime
GlobalFlags
GlobalGetAtomNameW
lstrlenA
GetModuleHandleA
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
CreateFileW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GetStringTypeExW
MoveFileW
InterlockedDecrement
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetTickCount
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
lstrlenW
GetSystemTime
GetProcAddress
GetModuleHandleW
LoadLibraryW
SetLastError
SetFileAttributesW
CopyFileW
DeleteFileW
GetTempPathW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExW
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
GetLastError
CreateProcessW
FreeResource
GetFileAttributesW
ExitProcess
GetModuleFileNameW
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
GetConsoleMode
SizeofResource
user32
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
DeleteMenu
GetSysColorBrush
WindowFromPoint
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuW
LoadAcceleratorsW
InsertMenuItemW
SetRectEmpty
TranslateAcceleratorW
DestroyMenu
GetMenuItemInfoW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDC
ReleaseDC
DestroyCursor
KillTimer
SetTimer
SetWindowRgn
DrawIcon
FillRect
IsRectEmpty
FindWindowW
SystemParametersInfoW
ShowOwnedPopups
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
CharUpperW
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
RegisterClipboardFormatW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetParent
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
UnregisterClassW
DestroyIcon
MessageBeep
GetNextDlgTabItem
EndDialog
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
GetActiveWindow
MessageBoxA
IsWindowVisible
IsWindow
GetComboBoxInfo
LoadBitmapW
BringWindowToTop
GetSystemMetrics
GetWindowRect
SetMenu
GetMenu
ReleaseCapture
SetCapture
GetKeyState
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CheckMenuRadioItem
AppendMenuW
CreateMenu
ClientToScreen
LoadCursorW
SetCursor
SendMessageW
SetRect
InvalidateRect
ShowScrollBar
GetParent
OffsetRect
InflateRect
GetClientRect
MessageBoxW
UpdateWindow
EnableWindow
SetWindowsHookExW
UnregisterClassA
gdi32
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
LineTo
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateSolidBrush
CreateFontIndirectW
RectVisible
SetRectRgn
CombineRgn
GetMapMode
GetTextExtentPoint32W
GetTextMetricsW
GetCharWidthW
CreateFontW
GetBkColor
GetTextColor
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
IntersectClipRect
ExcludeClipRect
SetMapMode
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
CreateRectRgnIndirect
CreateCompatibleDC
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
Rectangle
GetViewportOrgEx
CreatePen
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocW
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
CreateBitmap
CreateDCW
GetDeviceCaps
GetObjectW
SetBkColor
SetTextColor
GetClipBox
StretchDIBits
GetStockObject
BitBlt
CreateCompatibleBitmap
MoveToEx
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW
advapi32
RegDeleteValueW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegSetValueW
shell32
DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
comctl32
ord17
shlwapi
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgOpenStorageOnILockBytes
IsAccelerator
StgCreateDocfileOnILockBytes
OleTranslateAccelerator
oleaut32
SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
OleLoadPicture
VariantTimeToSystemTime
SystemTimeToVariantTime
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 380KB - Virtual size: 378KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
365防水墙系统安装包.exe.exe windows:4 windows x86 arch:x86
5fca3a714a40b2e5c5d5371b2291fbe8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord2621
ord1134
ord3790
ord924
ord800
ord858
ord537
ord540
ord5289
ord4234
ord1576
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord1168
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
malloc
free
_setmbcp
_controlfp
kernel32
GetVersionExA
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
SetFileAttributesA
SetCurrentDirectoryA
CopyFileA
GetModuleFileNameA
GetTempPathA
GetSystemDirectoryA
GetStartupInfoA
GetVersion
user32
MessageBoxA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
新云软件.url.url