四川恒玖机械有限公司-关于上海飞机客户服务有限公司成都维修基地叉车项目的询问书[.]exe

General

Target
四川恒玖机械有限公司-关于上海飞机客户服务有限公司成都维修基地叉车项目的询问书.exe
Size 160KB
Sample240730-eg7lkstfnn
SHA256 375bfc54fbef882da47e2f22d629e894fd0254411a87ea720de79e10074ca229
MD5 85f59da39a2ce6dd7305eb6df689bbe4
SHA1 caec49295c3025b0cd9343bdd8a9f4c25f9c3a9d
SHA512 603992c47bee81dab6cb756986883f0a14ccb7f27dd84067ff1d456967675cea2f69b57870c896c22e0cca1c70a269524c6ee9ca7a28f0743e9922b50136275f
SSDEEP 1536:C7WMqfyjNB19grIyITiOmyu896kvbDv689Wjfc5zjv+1kylhNR:EW7fyjL19xm496kTj9+c5z7+plbR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
四川恒玖机械有限公司-关于上海飞机客户服务有限公司成都维修基地叉车项目的询问书.exe

File Explorer

四川恒玖机械有限公司-关于上海飞机客户服务有限公司成都维修基地叉车项目的询问书.exe

.exe 160KB

四川恒玖机械有限公司-关于上海飞机客户服务有限公司成都维修基地叉车项目的询问书.exe

IMPHASH a7682c715ebf6b89c001a98a8a98acdf
SHA256 375bfc54fbef882da47e2f22d629e894fd0254411a87ea720de79e10074ca229
MD5 85f59da39a2ce6dd7305eb6df689bbe4
SHA1 caec49295c3025b0cd9343bdd8a9f4c25f9c3a9d
SHA512 603992c47bee81dab6cb756986883f0a14ccb7f27dd84067ff1d456967675cea2f69b57870c896c22e0cca1c70a269524c6ee9ca7a28f0743e9922b50136275f
SSDEEP 1536:C7WMqfyjNB19grIyITiOmyu896kvbDv689Wjfc5zjv+1kylhNR:EW7fyjL19xm496kTj9+c5z7+plbR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

6268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\admin\Documents\Visual Studio 2008\Projects\test1\x64\Release\test2.pdb

kernel32

GetTickCount Sleep VirtualAlloc GetModuleHandleW GetProcAddress ExitProcess GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId GetLastError FlsAlloc WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection RtlUnwindEx LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapSetInformation HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree MultiByteToWideChar HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW HeapAlloc HeapReAlloc ReadFile SetFilePointer SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

user32

MessageBoxA

Sharing