Static task
static1
Behavioral task
behavioral1
Sample
企业名单(补贴).exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
企业名单(补贴).exe
Resource
win10v2004-20231215-en
General
-
Target
企业名单(补贴).exe
-
Size
14.8MB
-
MD5
300895925db3d1cc26783271281959ce
-
SHA1
fddae1941beae89272220db019a5e615eefa10c1
-
SHA256
329067e657b789c792940e03edccc0b1c327b028d5aeff9a37e62554df10e22a
-
SHA512
08060d7bf90e8b4461ba2ee03c6378c6f94c225587c9919216bc9c1dc90e9de41d283df3f116220e29530cd52010f9963246d07073ad8494cb29e715459d3a6d
-
SSDEEP
393216:1vS0dCPRpNIeIq6WGGpLgaSzdS8PT0Fkf9Dpewpp++W:R/UPFIRCKRhS8PpwwppTW
Malware Config
Signatures
Files
-
企业名单(补贴).exe.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Code Sign
01Certificate
IssuerCN=Driver Information Technology Co.\, Ltd.,C=CNNot Before20/05/2023, 11:58Not After19/05/2024, 11:58SubjectCN=Driver Information Technology Co.\, Ltd.,C=CN01Certificate
IssuerCN=Driver Information Technology Co.\, Ltd.,C=CNNot Before20/05/2023, 11:58Not After19/05/2024, 11:58SubjectCN=Driver Information Technology Co.\, Ltd.,C=CNb7:da:4c:f2:7f:40:a7:20:c2:d5:a6:24:2e:d7:88:39:82:38:6d:e7:6a:c6:42:4e:5c:cd:31:dc:05:e7:fe:f7Signer
Actual PE Digestb7:da:4c:f2:7f:40:a7:20:c2:d5:a6:24:2e:d7:88:39:82:38:6d:e7:6a:c6:42:4e:5c:cd:31:dc:05:e7:fe:f7Digest Algorithmsha256PE Digest Matchestrue1f:2d:22:65:d7:8b:ec:6b:e4:b6:fd:0e:9c:63:da:11:61:7e:6b:1eSigner
Actual PE Digest1f:2d:22:65:d7:8b:ec:6b:e4:b6:fd:0e:9c:63:da:11:61:7e:6b:1eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 2.6MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jpncnihk Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mqidzgey Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE