2026 第三季度违纪违规人员名单信息pdf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2026 第三季度违纪违规人员名单信息pdf.exe
Size 885KB
Sample260820-p4qlpaxejg
SHA256 4af7427afecf542144af1e7bb8b61107d968e1745a9075a94052cb426dd744c3
MD5 0b5e91e0001193ba5f19bede88801908
SHA1 3e6937fe5ebfbd8a05df5d1cbab1ed63035a8e60
SHA512 c162eaba8523951c2f6b4ece2dbbbd929709aa9c81da54128e23e33b1942d5a929c88ca787d757704c52988bd6fe7ce5594aaaa8ce2859eabd3cff9cd8d48109
SSDEEP 12288:cj0fnIkizgwC2KrXQQ+iV8v0ZlPr4HSdsEVMOZ4spWzWW2t9YwHuT+xPE:c8nIDP+Q5iVPISvV3w2PH
TLSH
T1E8159E9BDAA392B5C42EC13AC8195126BAF5396547604AFF46840F712F1F6F8EF34708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026 第三季度违纪违规人员名单信息pdf.exe

File Explorer

2026 第三季度违纪违规人员名单信息pdf.exe

.exe 885KB

2026 第三季度违纪违规人员名单信息pdf.exe

IMPHASH 7d1f42f3c560591f966b044de7ad1411
SHA256 4af7427afecf542144af1e7bb8b61107d968e1745a9075a94052cb426dd744c3
MD5 0b5e91e0001193ba5f19bede88801908
SHA1 3e6937fe5ebfbd8a05df5d1cbab1ed63035a8e60
SHA512 c162eaba8523951c2f6b4ece2dbbbd929709aa9c81da54128e23e33b1942d5a929c88ca787d757704c52988bd6fe7ce5594aaaa8ce2859eabd3cff9cd8d48109
SSDEEP 12288:cj0fnIkizgwC2KrXQQ+iV8v0ZlPr4HSdsEVMOZ4spWzWW2t9YwHuT+xPE:c8nIDP+Q5iVPISvV3w2PH
TLSH
T1E8159E9BDAA392B5C42EC13AC8195126BAF5396547604AFF46840F712F1F6F8EF34708
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76524

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle ContinueDebugEvent CopyFileW CreateEventW CreateFileMappingW CreateFileW DecodePointer DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDiskFreeSpaceExW GetEnvironmentStringsW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemPowerStatus GetSystemTimeAsFileTime GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UpdateProcThreadAttribute VirtualProtect WaitForDebugEvent WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile lstrcatW lstrcmpiW lstrcpyW

advapi32

AllocateAndInitializeSid CreateProcessAsUserW CreateWellKnownSid EqualSid FreeSid GetTokenInformation OpenProcessToken RegCloseKey RegOpenKeyExW

user32

EnumDisplayDevicesW UnregisterClassW wsprintfW

wevtapi

EvtClose EvtCreateRenderContext EvtNext EvtQuery EvtRender

d3d11

D3D11CreateDevice

shell32

SHCreateItemFromParsingName SHGetKnownFolderPath

ole32

CoGetObject CoInitializeEx CoInitializeSecurity CoTaskMemFree CoUninitialize

oleaut32

SysAllocString SysFreeString

ntdll

DbgUiSetThreadDebugObject NtClose NtDuplicateObject NtQueryInformationProcess NtRemoveProcessDebug RtlAllocateHeap RtlFreeHeap

rpcrt4

NdrAsyncClientCall RpcAsyncCompleteCall RpcAsyncInitializeHandle RpcBindingFree RpcBindingFromStringBindingW RpcBindingSetAuthInfoExW RpcRaiseException RpcStringBindingComposeW RpcStringFreeW

Name

.text

Size

533KB

Virtual Size

532KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

93KB

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.voltbl

Size

512B

Virtual Size

50B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026 第三季度违纪违规人员名单信息pdf.exe

kernel32

advapi32

user32

wevtapi

d3d11

shell32

ole32

oleaut32

ntdll

rpcrt4

generic