Static task
static1
Behavioral task
behavioral1
Sample
sm2trn13/For Chinese Version/asx-sm2.cht.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
sm2trn13/For Chinese Version/asx-sm2.cht.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
sm2trn13/For English Version/asx-sw2.eng.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
sm2trn13/For English Version/asx-sw2.eng.exe
Resource
win10v2004-20231215-en
General
-
Target
88ef2b98ce10790d899de3bab38ca70e
-
Size
86KB
-
MD5
88ef2b98ce10790d899de3bab38ca70e
-
SHA1
9c249ebe73f22333241cd6a9b76a37d17577c20d
-
SHA256
e4713f2c316a40b78f89f0cde6f938dbaace8e27b4dfc0676e59287ace7898b2
-
SHA512
dbc0580d39439758173f2b363d8e097a2599b89e2ed8d52ff2785e7bda5d0c7a7b3458e9146784100bb7c0c959f783ed5e02e9c2a895a0dd4d4d7ceac80582a3
-
SSDEEP
1536:eTFFfaY+BZN561JSBgqGm6VM1AZ+ijmn2Qh/jWMOUDooYKQLwSssohqpfcmtQIMj:ehn+BZrCsXCS1A9jkhLWfwVQLdssohqu
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/sm2trn13/For Chinese Version/asx-sm2.cht.exe unpack001/sm2trn13/For English Version/asx-sw2.eng.exe
Files
-
88ef2b98ce10790d899de3bab38ca70e.rar
-
sm2trn13/ALI213.txt
-
sm2trn13/For Chinese Version/asx-sm2.cht.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.asx-0 Size: 373B - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asx-1 Size: 50KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
sm2trn13/For Chinese Version/asx-sm2.cht.nfo
-
sm2trn13/For English Version/asx-sw2.eng.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.asx-0 Size: 197B - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asx-1 Size: 27KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
sm2trn13/For English Version/asx-sw2.eng.nfo
-
sm2trn13/asxdox.nfo