Static task
static1
Behavioral task
behavioral1
Sample
NPW36-12 - SO-3995 (SO+INV+PKW) TW103045287------此筆核單尚未收到再麻煩您.scr
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
NPW36-12 - SO-3995 (SO+INV+PKW) TW103045287------此筆核單尚未收到再麻煩您.scr
Resource
win10v2004-20240508-en
General
-
Target
NPW36-12 - SO-3995 (SO+INV+PKW) TW103045287------此筆核單尚未收到再麻煩您.scr
-
Size
665KB
-
MD5
384db0b53fbe573a18d40e162ca2f5f2
-
SHA1
8afcbdb1c4e1eb198654d645a6dedde116d919b5
-
SHA256
e8eac417d6b3650b3922e621cbff64aeca0848583d0ffbb8dce64f6bd331587b
-
SHA512
5ee926a12bdf6f72111b7504f0c7a0c5591e7e8e0e5e0cf1416ed26e1a0661dfeeed926db9ffe6ccbd2cbd0cc3b98cb59f5ad98ee9f96e9069bd3c855671946f
-
SSDEEP
12288:s3/iFIsPAb/z/ZfQ0TYcAXNOVikqMI+oTIhHs04OtKHEGqAzPPktBjeDS4L3QcBr:ukIKybscAQm+OeHB4tLqA7oBCbGAuePj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NPW36-12 - SO-3995 (SO+INV+PKW) TW103045287------此筆核單尚未收到再麻煩您.scr
Files
-
NPW36-12 - SO-3995 (SO+INV+PKW) TW103045287------此筆核單尚未收到再麻煩您.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ