Static task
static1
Behavioral task
behavioral1
Sample
查处名单册-终端.exe
Resource
win10-20240221-en
General
-
Target
查处名单册-终端.zip
-
Size
26KB
-
MD5
d103113685bad1178063e8c31e1f6f7a
-
SHA1
4c99b61f4ee501ff1671078d5e917f67f7cce917
-
SHA256
fd6e5902194c6ab79c6884850f7b920ea7720578101afa397a186ac3efa63517
-
SHA512
0748aa479000fac4de0f9c4862dc9548ea8d189a6f659e8deb5d33080f171bf987f0e227700b15ee30e23449f755a50d85350f682e3ea5d8a0561bbf6c5f52a0
-
SSDEEP
768:2DViGbfU28cxEnulAhOLutkzM94Nm8/U6kdn:ysGbzLCOLnA94Ob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/查处名单册-终端.exe1
Files
-
查处名单册-终端.zip.zip
-
查处名单册-终端.exe1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ