General

  • Target

    f509e5ab96f7a9d6bafd7cffa234369dcb29ff953f90b62ed9b3f7479bbf0d46

  • Size

    6.8MB

  • MD5

    210348aa43805c9ff0f346e03a8523dc

  • SHA1

    bd46f4b84aadc3c252c5cc2dc955bdd870c6700a

  • SHA256

    f509e5ab96f7a9d6bafd7cffa234369dcb29ff953f90b62ed9b3f7479bbf0d46

  • SHA512

    b0007c6e2ae2bc685dda553796f4a77519be93c3b028671e8c9db78ac00fb48e8e4355981508b7c030a33c85c0227868a518f47c2a56c79252f022599956890e

  • SSDEEP

    196608:IE3uMNSm3R31EnOshPoS5OM6E/9WZc1dfVk4Vgr6lht0qB/go:IENDRMZhj0OYc1sQgMt0i/go

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • f509e5ab96f7a9d6bafd7cffa234369dcb29ff953f90b62ed9b3f7479bbf0d46
    .zip
  • BS柜台/websale_dx/page/account/product/acctUpdProduct.js
    .js
  • Fund.bat
  • changeorauser.bat
  • fr.exe
    .exe windows:4 windows x86 arch:x86

    c495322207d42af6a2039c1063f3c072


    Headers

    Imports

    Sections

  • kcbp/lbm_ora_release/lbm_properset.dll
    .dll windows:5 windows x64 arch:x64

    016ad4486da65a24a8a19ec6846ddc64


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_salecust.dll
    .dll windows:5 windows x64 arch:x64

    a0eb69bcf5a7662d479a326c56249d2c


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_salemobile.dll
    .dll windows:5 windows x64 arch:x64

    0eb1368de1cf23e31c9026bb8ae453ac


    Headers

    Imports

    Exports

    Sections

  • kcbp/lbm_ora_release/lbm_saleper.dll
    .dll windows:5 windows x64 arch:x64

    544900f9576a1e5a39ec1c866b1da96a


    Headers

    Imports

    Exports

    Sections

  • kd_his_scripts.lst
    .vbs
  • kd_sale/Version.ora
  • kd_sale_scripts.lst
    .vbs
  • 金证基金销售系统整体升级说明(CA_V4.9.4_202408_UPD04)--升级前必看.doc
    .doc windows office2003