Static task
static1
Behavioral task
behavioral1
Sample
我的.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
我的.exe
Resource
win10v2004-20240226-en
General
-
Target
要求和预算.rar
-
Size
114KB
-
MD5
9a151df486d3fee4cccd751e09f7186e
-
SHA1
e6fefaa4bbe643667d0e84d446a8217580f2d6aa
-
SHA256
9ef188c31119edf83229a95599d537a0c5a2e1423b521b0f611890b3dba7df12
-
SHA512
8b7c3932ab067b60c34fdb104571991686d9373c6a9e18470f09f3fcd85b1e7d4a3e0b63e5560d16b2744ea7434f850f6066030fed71a5931460da4bfe87f186
-
SSDEEP
1536:cmP2t+L75S4Un/v8PT28PwdxesTg/zA4TwjLiQu0hKZePGFd34CoYkVaTXmF0FIf:cq04qMPT2Pd9Ta5sKM29BRKatIkPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/我的.exe
Files
-
要求和预算.rar.rar
-
我的.exe.exe windows:4 windows x86 arch:x86
50b9a4ca61fba31b3609abc913b46942
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetACP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
RtlUnwind
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStartupInfoA
lstrlenA
GetProcessHeap
GetCommandLineA
ExitProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
HeapAlloc
VirtualAlloc
HeapFree
SetErrorMode
GetOEMCP
GetCPInfo
GetCurrentProcess
FlushFileBuffers
MoveFileA
GetThreadLocale
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalAddAtomA
WritePrivateProfileStringA
FreeResource
GetCurrentProcessId
GetTickCount
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetFileTime
WriteFile
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
CloseHandle
SetFilePointer
CreateFileA
LockResource
Sleep
GetFileAttributesA
CreateDirectoryA
FindClose
FindFirstFileA
LoadLibraryA
GetProcAddress
SizeofResource
LoadResource
FindResourceA
GetLastError
MultiByteToWideChar
GetVersion
InterlockedExchange
CompareStringA
WideCharToMultiByte
lstrlenW
GetStringTypeW
user32
UnregisterClassA
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetSysColorBrush
LoadCursorA
GetDC
ReleaseDC
DestroyMenu
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
UpdateWindow
EnableWindow
wsprintfA
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextA
GetFocus
SetFocus
ShowWindow
SetWindowLongA
GetDlgCtrlID
IsWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
RegisterClipboardFormatA
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
SetWindowPos
GetWindow
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
gdi32
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
RestoreDC
SaveDC
GetStockObject
DeleteDC
DeleteObject
SelectObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SetMapMode
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 164KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ