General

  • Target

    30f860aa48d9cda9329ba4ab78c341beb02c0d92b7294d5ee139feb59f15dca1

  • Size

    9.0MB

  • MD5

    2704c7c9ad4409171d1b854904cf408a

  • SHA1

    7bd9551756974483cc20467567977279fe440574

  • SHA256

    30f860aa48d9cda9329ba4ab78c341beb02c0d92b7294d5ee139feb59f15dca1

  • SHA512

    ada37716958ed3874cb0ef99b5d257eeefac277f001b50f60957868581a3e4ae34bd395500d0b44b9afc544ba36ca2d9a702931149a609555b086ffbfab62077

  • SSDEEP

    196608:xvPiaRWYavlM1do0LlUlfaMy48F/ziGhD0U8DHjK6N:xvPioWVa1N2iMeZrC7jbN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 30f860aa48d9cda9329ba4ab78c341beb02c0d92b7294d5ee139feb59f15dca1
    .zip
  • BS柜台/websale_dx/KJAF2/css/main-em.css
  • BS柜台/websale_dx/WEB-INF/config/spring/menu.xml
    .xml
  • BS柜台/websale_dx/WEB-INF/lib/kdsale-1.0-SNAPSHOT.jar
    .jar
  • BS柜台/websale_dx/comps/ui-comp-CustmanagerDialog.js
    .js
  • BS柜台/websale_dx/comps/ui-comp-ProductFileSetDialog.js
    .js
  • BS柜台/websale_dx/page/Statistics/TransCfmCustManagerSet.html
    .html .js polyglot
  • BS柜台/websale_dx/page/Statistics/TransCfmCustManagerSet.js
    .js
  • BS柜台/websale_dx/page/set/js/custManagerSet.js
    .js
  • Fund.bat
  • changeorauser.bat
  • fr.exe
    .exe windows:4 windows x86 arch:x86

    c495322207d42af6a2039c1063f3c072


    Headers

    Imports

    Sections

  • kcbp/lbm_ora_release/lbm_filehandle.dll
    .dll windows:5 windows x64 arch:x64

    631c75859337988f75817424f7b4112b


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_saleclear.dll
    .dll windows:5 windows x64 arch:x64

    863451aed76d1dcf884beebd085ab3b7


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_saleper.dll
    .dll windows:5 windows x64 arch:x64

    544900f9576a1e5a39ec1c866b1da96a


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_saleqry.dll
    .dll windows:5 windows x64 arch:x64

    67b23103cde456b2eb8b00f23372e3f2


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_saletrade.dll
    .dll windows:5 windows x64 arch:x64

    25af52682bd223d63dc244b9820686a2


    Headers

    Imports

    Exports

    Sections

  • kd_his/0_his_table.ora
  • kd_his_scripts.lst
    .vbs
  • kd_sale/0_table.ora
  • kd_sale/1_view[修改视图].ora
  • kd_sale/Version.ora
  • kd_sale_scripts.lst
    .vbs
  • 金证基金销售系统整体升级说明(CA_V4.9.3_202406_UPD03)--升级前必看.doc
    .doc windows office2003