D:\china\2302\Client\China_2022_Release\Client.pdb
Static task
static1
Behavioral task
behavioral1
Sample
aee0cd0f93288061a75db40c1666b4163974d8cffd2b2ade0365e119f3404d0b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aee0cd0f93288061a75db40c1666b4163974d8cffd2b2ade0365e119f3404d0b.exe
Resource
win10v2004-20240802-en
General
-
Target
aee0cd0f93288061a75db40c1666b4163974d8cffd2b2ade0365e119f3404d0b
-
Size
10.8MB
-
MD5
a83b1381cb2dbc4676f5aaa7a4d6d0c5
-
SHA1
1be6f8b713235f6372d7c65e17d2a1088a5eaf38
-
SHA256
aee0cd0f93288061a75db40c1666b4163974d8cffd2b2ade0365e119f3404d0b
-
SHA512
17eff99007d3353cd9cc5f2bcf83dfb61d51e7f38fb01bbb2c061154bf25d620422310ac8f0c3e44856ddde7b29d148c1e2208f6968960021aa1a365ac55fcb0
-
SSDEEP
196608:9M0lOaTutML3EX0rRk4dSUae6+lHmuM4AxvfYA:9M0lOb9Xyk4gxdQR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aee0cd0f93288061a75db40c1666b4163974d8cffd2b2ade0365e119f3404d0b
Files
-
aee0cd0f93288061a75db40c1666b4163974d8cffd2b2ade0365e119f3404d0b.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 167KB - Virtual size: 61.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.IIDKing Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE