Overview

overview

7

Static

static

7

StarHR昕�...��.exe

windows7-x64

3

StarHR昕�...��.exe

windows10-2004-x64

3

data/Metro.htm

windows7-x64

1

data/Metro.htm

windows10-2004-x64

1

data/Phone.htm

windows7-x64

1

data/Phone.htm

windows10-2004-x64

1

data/Timeex.htm

windows7-x64

1

data/Timeex.htm

windows10-2004-x64

1

data/Worlda.htm

windows7-x64

1

data/Worlda.htm

windows10-2004-x64

1

data/新云软件.url

windows7-x64

1

data/新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c78196cbc4df4b4ce4cf7ebfb4448c9

  • Size

    2.8MB

  • MD5

    7c78196cbc4df4b4ce4cf7ebfb4448c9

  • SHA1

    dd2f29d249746abc3e6ebd66facb86f47271e51f

  • SHA256

    9b6a51adcbb3fd68b3b56279ff9a8669c4e043c2450ff135be2d8bf50001805f

  • SHA512

    f0b99ce5eaa0ff983c97e059fb7da13cd0a935f72cf39cf073b1aecf46d0316656162d5aaee6c35dcb7880c63699489fe00391d5e0393a3bf38fb26d46b1b77b

  • SSDEEP

    49152:YoAvnCfvpMVcXp+U41uImh0H1HgHE2De6NkY2PiKjaQjU5DeWZm2L/b5/c5W0Azp:YoAGpOcX0U41uRhq2K6NkTJjU3Zm2Te+

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7c78196cbc4df4b4ce4cf7ebfb4448c9
    .rar
  • StarHR昕友人力资源管理系统.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • data/Metro.htm
    .html
  • data/Phone.htm
    .html
  • data/Timeex.htm
    .html
  • data/Worlda.htm
    .html
  • data/calendar.mht
    .eml .js polyglot
  • data/starCRM.mdb
  • data/新云软件.url
    .url
  • 说明.txt