Static task
static1
Behavioral task
behavioral1
Sample
源代码/MDIAPP.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
源代码/MDIAPP.exe
Resource
win10v2004-20231215-en
General
-
Target
8cb8bf3da4aa15b43e3167b3bdcd9f5b
-
Size
540KB
-
MD5
8cb8bf3da4aa15b43e3167b3bdcd9f5b
-
SHA1
53dcd02ba73e80fdcec2fe92bc0f120e6bb0405f
-
SHA256
7a0dcf57ebec97b99c5644e47a9ba8b16cdd1ca2e8b80275bbdaba475612f422
-
SHA512
182becb8cd2f2817de1ef734d3731655bfde148271c6d4944c9a5bba0a2bc56160989ce30096b12878c0d91b4472f6ddf632680cb93fddb5e32537232bb3be64
-
SSDEEP
12288:tDRYcBUXzoUwFHzh1wopSl8uDnETFvW8VL46SM:t8DoUwFThSop1ubSFvxL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/源代码/MDIAPP.exe
Files
-
8cb8bf3da4aa15b43e3167b3bdcd9f5b.rar
-
下载说明.htm.html .js polyglot
-
源代码/CHILDWIN.DFM
-
源代码/CHILDWIN.PAS
-
源代码/CHILDWIN.dcu
-
源代码/DinnerChar.dcu
-
源代码/DinnerChar.ddp
-
源代码/DinnerChar.dfm
-
源代码/DinnerChar.pas
-
源代码/DinnerChar.~ddp
-
源代码/DinnerChar.~dfm
-
源代码/DinnerChar.~pas
-
源代码/DinnerInput.dcu
-
源代码/DinnerInput.ddp
-
源代码/DinnerInput.dfm
-
源代码/DinnerInput.pas
-
源代码/DinnerInput.~ddp
-
源代码/DinnerInput.~dfm
-
源代码/DinnerInput.~pas
-
源代码/DinnerQuery.dcu
-
源代码/DinnerQuery.ddp
-
源代码/DinnerQuery.dfm
-
源代码/DinnerQuery.pas
-
源代码/DinnerQuery.~ddp
-
源代码/DinnerQuery.~dfm
-
源代码/DinnerQuery.~pas
-
源代码/DinnerRep.dcu
-
源代码/DinnerRep.ddp
-
源代码/DinnerRep.dfm
-
源代码/DinnerRep.pas
-
源代码/DinnerRep.~ddp
-
源代码/DinnerRep.~dfm
-
源代码/DinnerRep.~pas
-
源代码/DisSet.dcu
-
源代码/DisSet.ddp
-
源代码/DisSet.dfm
-
源代码/DisSet.pas
-
源代码/DisSet.~ddp
-
源代码/DisSet.~dfm
-
源代码/DisSet.~pas
-
源代码/MAIN.PAS
-
源代码/MAIN.dcu
-
源代码/MAIN.ddp
-
源代码/MAIN.dfm
-
源代码/MAIN.~PAS
-
源代码/MAIN.~ddp
-
源代码/MAIN.~dfm
-
源代码/MDIAPP.ICO
-
源代码/MDIAPP.RES
-
源代码/MDIAPP.cfg
-
源代码/MDIAPP.dof
-
源代码/MDIAPP.dpr
-
源代码/MDIAPP.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
源代码/MDIAPP.~dpr
-
源代码/Passwd.dcu
-
源代码/Passwd.dfm
-
源代码/Passwd.pas
-
源代码/Passwd.~dfm
-
源代码/Passwd.~pas
-
源代码/RoomRep.dcu
-
源代码/RoomRep.ddp
-
源代码/RoomRep.dfm
-
源代码/RoomRep.pas
-
源代码/RoomRep.~ddp
-
源代码/RoomRep.~dfm
-
源代码/RoomRep.~pas
-
源代码/SerSet.dcu
-
源代码/SerSet.ddp
-
源代码/SerSet.dfm
-
源代码/SerSet.pas
-
源代码/SerSet.~ddp
-
源代码/SerSet.~dfm
-
源代码/SerSet.~pas
-
源代码/TaxSet.dcu
-
源代码/TaxSet.ddp
-
源代码/TaxSet.dfm
-
源代码/TaxSet.pas
-
源代码/TaxSet.~ddp
-
源代码/TaxSet.~dfm
-
源代码/TaxSet.~pas
-
源代码/Unit1.dcu
-
源代码/UserReg.dcu
-
源代码/UserReg.dfm
-
源代码/UserReg.pas
-
源代码/UserReg.~dfm
-
源代码/UserReg.~pas
-
源代码/about.dcu
-
源代码/about.dfm
-
源代码/about.pas
-
源代码/db/DBDWORK.INI
-
源代码/db/dinner.DB
-
源代码/db/dinner.FAM
-
源代码/db/dinner.PX
-
源代码/db/dinner.TV
-
源代码/db/room.DB
-
源代码/db/room.FAM
-
源代码/db/room.PX
-
源代码/db/room.TV
-
源代码/db/sales.DB
-
源代码/db/sales.FAM
-
源代码/db/sales.PX
-
源代码/db/sales.TV
-
源代码/db/sales.VAL
-
源代码/db/user.DB
-
源代码/db/user.FAM
-
源代码/db/user.TV
-
源代码/login.dcu
-
源代码/login.ddp
-
源代码/login.dfm
-
源代码/login.pas
-
源代码/login.~ddp
-
源代码/login.~dfm
-
源代码/login.~pas
-
源代码/rommInput.dcu
-
源代码/rommInput.ddp
-
源代码/rommInput.dfm
-
源代码/rommInput.pas
-
源代码/rommInput.~ddp
-
源代码/rommInput.~dfm
-
源代码/rommInput.~pas
-
源代码/roomChart.dcu
-
源代码/roomChart.ddp
-
源代码/roomChart.dfm
-
源代码/roomChart.pas
-
源代码/roomChart.~ddp
-
源代码/roomChart.~dfm
-
源代码/roomChart.~pas
-
源代码/roomQuery.dcu
-
源代码/roomQuery.ddp
-
源代码/roomQuery.dfm
-
源代码/roomQuery.pas
-
源代码/roomQuery.~ddp
-
源代码/roomQuery.~dfm
-
源代码/roomQuery.~pas
-
源代码/saleChar.dcu
-
源代码/saleChar.ddp
-
源代码/saleChar.dfm
-
源代码/saleChar.pas
-
源代码/saleChar.~ddp
-
源代码/saleChar.~dfm
-
源代码/saleChar.~pas
-
源代码/saleInput.dcu
-
源代码/saleInput.ddp
-
源代码/saleInput.dfm
-
源代码/saleInput.pas
-
源代码/saleInput.~ddp
-
源代码/saleInput.~dfm
-
源代码/saleInput.~pas
-
源代码/saleQuery.dcu
-
源代码/saleQuery.ddp
-
源代码/saleQuery.dfm
-
源代码/saleQuery.pas
-
源代码/saleQuery.~ddp
-
源代码/saleQuery.~dfm
-
源代码/saleQuery.~pas
-
源代码/saleRep.dcu
-
源代码/saleRep.ddp
-
源代码/saleRep.dfm
-
源代码/saleRep.pas
-
源代码/saleRep.~ddp
-
源代码/saleRep.~dfm
-
源代码/saleRep.~pas
-
源代码/下载说明.htm.html .js polyglot
-
程序使用说明.txt