General

  • Target

    a3344cd03e89cc1fd903034cd6ee851d

  • Size

    4.8MB

  • MD5

    a3344cd03e89cc1fd903034cd6ee851d

  • SHA1

    e14275c6c378c19fbc4022a40b104d0ee7d88b13

  • SHA256

    d1981d22a27153b71cee5ad723cc855ac17b1ff5ec4319da589543da5ff50d97

  • SHA512

    7fd1d82cc06bee64b89a3b6e3a2a2c237b148b659434b38e4cea4ae9c524f41e033bf97d5fa32298e1ca417d4fc0d6f739c281cbd837ae57ef2c1f34e61ff388

  • SSDEEP

    98304:pJjWBipc1l7EPE0uwd1IYSCLPNd0RZPi+RL0NoJ7dY3yNu:pJqBiO1tEoetEjLZ0iu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • a3344cd03e89cc1fd903034cd6ee851d
    .zip
  • 2020.4.2.1.from
  • Replace/FSS_FLC/Forms.xml
  • Replace/FSS_FLC/Forms/Okved/schema/okvedconfirmgtw.xsd
    .xml
  • Replace/Forms.xml
  • Replace/Forms/501/xsd/NO_AKCNEFT_1_178_00_05_01_01.xsd
    .xml
  • Replace/Forms/501/xsd/NO_RASCHSV_1_162_00_05_02_05.xsd
    .xml
  • Replace/Forms/501/xsd/SR_ZPUSN_1_092_00_05_08_01.xsd
    .xml
  • Replace/Forms/501/xslt/1114308/502/F1114308.xslt
  • Replace/Forms/501/xslt/1114308/502/F1114308_P01.xslt
  • Replace/Forms/501/xslt/1115104/503/F1115104.xslt
    .xml
  • Replace/Forms/501/xslt/1115104/503/F1115104_P01.xslt
    .xml
  • Replace/Forms/501/xslt/1115104/503/F1115104_P02.xslt
    .xml
  • Replace/Forms/501/xslt/1115131/501/helper_templates.xslt
    .js
  • Replace/Forms/501/xslt/1150010/508/F1150010.xslt
    .xml
  • Replace/Forms/501/xslt/1150010/508/F1150010_P1.xslt
    .xml
  • Replace/Forms/501/xslt/1150010/508/F1150010_P2.xslt
    .xml
  • Replace/Forms/501/xslt/1150010/508/F1150010_P3.xslt
    .xml
  • Replace/Forms/501/xslt/1150010/508/F1150010_P4.xslt
    .xml
  • Replace/Forms/501/xslt/1150010/508/F1150010_P5.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P1.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P2.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P3.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P4.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P5.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P6.xslt
    .xml
  • Replace/Forms/501/xslt/1151095/501/F1151095_P7.xslt
    .xml
  • Replace/Forms/501/xslt/1152026/506/F1152026_P3.xslt
    .xml
  • Replace/Forms/501/xslt/1175012/501/F1175012.xslt
  • Replace/Forms/501/xslt/1175012/501/F1175012_P1_FULL.xslt
  • Replace/Forms/501/xslt/1175012/502/F1175012.xslt
  • Replace/Forms/501/xslt/1175012/502/F1175012_P1_FULL.xslt
  • Replace/Forms/501/xsltcheck/0710096/503/F0710096.xslt
  • Replace/Forms/501/xsltcheck/0710099/508/F0710099.xslt
  • Replace/Forms/501/xsltcheck/1150010/508/F1150010.xslt
  • Replace/Forms/501/xsltcheck/1151095/501/F1151095.xslt
  • Replace/Help/guide_history.html
    .html
  • Replace/PFR_Forms.xml
    .xml
  • Replace/PFR_Forms//xsd//xmldsig_core_schema.xsd
    .xml
  • Replace/PFR_Forms//xsd////띄_2018-11-26.xsd
    .xml
  • Replace/PFR_Forms//xsd////_2019-12-12.xsd
    .xml
  • Replace/PFR_Forms//xsd//뀔_2017-08-21.xsd
    .xml
  • Replace/PFR_Forms//xsd//䒨_2017-08-21.xsd
    .xml
  • Replace/PFR_Forms//xslt/css.xslt
    .xml
  • Replace/PFR_Forms//xslt/upup/main.xslt
    .xml
  • Replace/PFR_Forms//xslt/upup/page-1.xslt
    .xml
  • Replace/PFR_Forms//xslt/upup/page-2.xslt
    .xml
  • Replace/PfrForms.xml
  • Replace/TaxNet.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Replace/Taxnet.Flc.Fss.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Flc.Fss.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Flc.Pfr.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Flc.Pfr.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.FssAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.BLL.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.BusinessLogic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.EmailSynchronizer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.Enums.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.UI.WPF.Test.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.UI.WPF.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Replace/Taxnet.Referent.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections