General

  • Target

    c8a1823ec9738cc881ce8d473e6f8797794e48a113ab538085f4d5913ac8ba0e

  • Size

    1.3MB

  • MD5

    6c7f8ba710f836c7b9682c9b2d08ab8a

  • SHA1

    631918d9300bd6b397939773bbb22471845cecd6

  • SHA256

    c8a1823ec9738cc881ce8d473e6f8797794e48a113ab538085f4d5913ac8ba0e

  • SHA512

    22a1038ca429904bb09838883b27363e2a4f021f8eb713ad92ccbc76b3d506a527a6d415f5698286a2bdfb780e1f5698dec37332351997eb40a2413bd137adc5

  • SSDEEP

    24576:iPsyhzj4lvISiJhFP3a6VPdpRYr7ONrlFd+NLBn0CygH7R6jFMNHx4Z7kuFgV:esw4lDiHLVpRI7ON1+5Bn0CJ7ojylxE4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • c8a1823ec9738cc881ce8d473e6f8797794e48a113ab538085f4d5913ac8ba0e
    .exe windows:4 windows x86 arch:x86

    59b8ea9c7392c40cfbac34d0d968ab59


    Headers

    Imports

    Sections

  • ActiveOfficeTool.exe
    .exe windows:6 windows x86 arch:x86

    fdcdd3620d840276f6ec99b22938543d


    Headers

    Imports

    Sections

  • AutoActiveOffice.exe
    .exe windows:4 windows x86 arch:x86

    59b8ea9c7392c40cfbac34d0d968ab59


    Headers

    Imports

    Sections

  • TaskRun.exe
    .exe windows:6 windows x86 arch:x86

    7f1cc3f2f54b1c0a8cd5e076d367d974


    Code Sign

    Headers

    Imports

    Sections

  • activeoffice/active_office2019.bat
    .bat .vbs
  • activeoffice/active_office2021.bat
    .bat .vbs
  • msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    8e61b722e85fbed5d51341054b6e1f64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    d50091f09e88761b3ef2951b59df801c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • task_config.xml
    .xml
  • DuiLib.dll
    .dll windows:6 windows x86 arch:x86

    40e3b544d3ff20968f7a6fdc6dc14a29


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • config.ini
  • msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    8e61b722e85fbed5d51341054b6e1f64


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    d50091f09e88761b3ef2951b59df801c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • skin/language.xml
  • skin/main.xml
  • skin/pic/backup.png
    .png
  • skin/pic/checkbox.png
    .png
  • skin/pic/office2016_bk_cn.png
    .png
  • skin/pic/office2016_bk_en.png
    .png