Behavioral task
behavioral1
Sample
中国财税金融法规大全.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
中国财税金融法规大全.exe
Resource
win10v2004-20231222-en
General
-
Target
71e80c8c51e8ef950fb19863aef5bef6
-
Size
17.7MB
-
MD5
71e80c8c51e8ef950fb19863aef5bef6
-
SHA1
730470e6de75b4fc590f90cea1f6cc19686cf426
-
SHA256
8a55a6045bcd735608505438dcf7dcb8809afde8ef21963f3ecd894138190078
-
SHA512
5da08264e8f3b9bcf9b12d6b8e1bbaed0646a87d8461b7aaf76dc8bd297ae82d8d7798b6ab38ce52645292abe19c0bf2a5224f7d9bb12453454573a8e2bb4274
-
SSDEEP
393216:A57+IDrFGnreWLuEPeLbYW7IsC/fjjNl/c8YKoppd2:SyuGnCWL/c9k/fvfVYpd2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/中国财税金融法规大全.exe aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/中国财税金融法规大全.exe
Files
-
71e80c8c51e8ef950fb19863aef5bef6.rar
-
下载说明.htm.html .js polyglot
-
中国财税金融法规大全.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 405KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE