General

  • Target

    6470d739aa2312a607bd0df2cbc8b8047f7316fef79f418176050391f059ee09

  • Size

    8.5MB

  • MD5

    b6cce279e5c3a7ea5bcdf002405d84ed

  • SHA1

    2eaea15078207c52f4ba10f35d1c01a0ca22e7b3

  • SHA256

    6470d739aa2312a607bd0df2cbc8b8047f7316fef79f418176050391f059ee09

  • SHA512

    84984a151e20c31af20250b57f976d7eb140011bf95af17b52a870928d1b92dd9095cd5590851a4b2fd46b2b867124bee1d491b56d70728da4dc3e5f2fd94cbc

  • SSDEEP

    196608:oK+VxzVPajCICVf/etkUxCpitZj68XkwynjtJ:oK+VJVSjf26kQ/tZjrZeH

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 6470d739aa2312a607bd0df2cbc8b8047f7316fef79f418176050391f059ee09
    .zip
  • 搜索文本2.4/Styles/淡雅.style
  • 搜索文本2.4/Styles/灰黑.Style
  • 搜索文本2.4/Styles/黑蓝.style
  • 搜索文本2.4/Styles/默认.style
  • 搜索文本2.4/doc2text.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 搜索文本2.4/pdfium.dll
    .dll windows:5 windows x86 arch:x86

    690472e3c1f488223f5f7f88fd5b3bdf


    Headers

    Imports

    Exports

    Sections

  • 搜索文本2.4/搜索文本.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections