D:\mywork\SF884\上位机\ParcelPostScale\Release\POSTAL SCALE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a789571fe1090d394f3d694b1f5535032f29b1db1a385f93c72b80d0eb419160.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
a789571fe1090d394f3d694b1f5535032f29b1db1a385f93c72b80d0eb419160.exe
Resource
win10v2004-20241007-en
General
-
Target
a789571fe1090d394f3d694b1f5535032f29b1db1a385f93c72b80d0eb419160
-
Size
1.1MB
-
MD5
22bb96e25c2cff7ef4b0571286e458a9
-
SHA1
9d01c09cc5d0347f1632466053891833c6db265b
-
SHA256
a789571fe1090d394f3d694b1f5535032f29b1db1a385f93c72b80d0eb419160
-
SHA512
94c524250f49c2aa786c80f88ae78a6b8702b0f18e061f8ec9d51f5e8caf551f6ddd19302dcfd1aca3e9073d8090283406493e5d058d68c3cf5780ecae82f4fd
-
SSDEEP
24576:g3ijXtmDOTle5RWGgHC0RiMScKdRQccH6n9Abugu:g0XtmqTI01HC0RiLcOjc6Abug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a789571fe1090d394f3d694b1f5535032f29b1db1a385f93c72b80d0eb419160
Files
-
a789571fe1090d394f3d694b1f5535032f29b1db1a385f93c72b80d0eb419160.exe windows:5 windows x86 arch:x86
efcadf6305dd8c1bf08debfb314838b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
StgCreateDocfile
OleInitialize
CoCreateInstance
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitialize
CoUninitialize
kernel32
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrlenW
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
MulDiv
GlobalAlloc
GetVersionExA
lstrcmpW
LoadLibraryW
GetVersionExW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
EnumSystemLocalesA
SetThreadPriority
GetModuleHandleA
GlobalFlags
lstrlenA
GetThreadLocale
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FreeLibrary
HeapSize
HeapReAlloc
VirtualAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
RtlUnwind
GetCPInfo
GetSystemTimeAsFileTime
FindClose
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
GetProcAddress
GetModuleHandleW
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
DeleteCriticalSection
InterlockedExchange
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
ResumeThread
SuspendThread
LocalFree
PurgeComm
WaitCommEvent
WaitForMultipleObjects
SetCommMask
GetCommMask
BuildCommDCBW
EnterCriticalSection
GetLastError
GetOverlappedResult
CreateFileW
ReadFile
LeaveCriticalSection
FormatMessageW
InitializeCriticalSection
SetCommTimeouts
SetCommState
WriteFile
GetCommState
ClearCommError
CloseHandle
CreateEventW
ResetEvent
WritePrivateProfileStringW
MultiByteToWideChar
GetModuleFileNameW
Sleep
WideCharToMultiByte
SetEvent
WaitForSingleObject
LockResource
SizeofResource
GetPrivateProfileStringW
LoadResource
FindResourceW
ExitThread
CreateThread
VirtualProtect
GetSystemInfo
VirtualQuery
user32
UnregisterClassW
SetCapture
LoadCursorW
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterClipboardFormatW
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SetCursor
PostQuitMessage
ReleaseDC
GetDC
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
PostThreadMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
GetWindowRect
GetWindow
CopyAcceleratorTableW
CharNextW
CharUpperW
SendDlgItemMessageW
ReleaseCapture
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBoxW
GetSystemMenu
IsIconic
DrawIcon
GetClientRect
LoadIconW
AppendMenuW
GetSystemMetrics
SetTimer
KillTimer
SendMessageW
EnableWindow
gdi32
DeleteDC
GetStockObject
RectVisible
ExtSelectClipRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
CreateBitmap
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
TextOutW
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumValueW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
oleaut32
SysAllocString
OleCreateFontIndirect
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
Sections
.text Size: 402KB - Virtual size: 401KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 571KB - Virtual size: 570KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ