2026年··第三季度违纪违规人员名单信息pdf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2026年··第三季度违纪违规人员名单信息pdf.exe
Size 4.6MB
Sample260820-p5axmacp2x
SHA256 317fd32bec648f256acba6feeec2ddf86571c0960fc1a605b2ad3baf8cc986ae
MD5 2967f49e388de9399dd67b58426c8e8f
SHA1 544f7226d5d6aba1dd6f56eb5847aaa9c3c16b1b
SHA512 c56919aa09b37afe98a5a8547f8fe9f27c82eb27489e4f24795d5274371cc2a3dbff80073afa7e59e0b7f74b1f3132ae515dbb93c1738937cf79384f69fbab3e
SSDEEP 98304:eyXP5PBIl68/I3daJsv6tWKFdu9Ch62uQG:eyPJIJsv6tWKFdu9ChhY
TLSH
T17C268D87B6B602D4E5B7C138D2E76227EA313C5A8B24A9CF125C67191E737F05E3A305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026年··第三季度违纪违规人员名单信息pdf.exe

File Explorer

2026年··第三季度违纪违规人员名单信息pdf.exe

.exe 4.6MB

2026年··第三季度违纪违规人员名单信息pdf.exe

IMPHASH 828ff1fcfdf57fc2793509db95c576ba
SHA256 317fd32bec648f256acba6feeec2ddf86571c0960fc1a605b2ad3baf8cc986ae
MD5 2967f49e388de9399dd67b58426c8e8f
SHA1 544f7226d5d6aba1dd6f56eb5847aaa9c3c16b1b
SHA512 c56919aa09b37afe98a5a8547f8fe9f27c82eb27489e4f24795d5274371cc2a3dbff80073afa7e59e0b7f74b1f3132ae515dbb93c1738937cf79384f69fbab3e
SSDEEP 98304:eyXP5PBIl68/I3daJsv6tWKFdu9Ch62uQG:eyPJIJsv6tWKFdu9ChhY
TLSH
T17C268D87B6B602D4E5B7C138D2E76227EA313C5A8B24A9CF125C67191E737F05E3A305
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1383536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AcquireSRWLockExclusive CloseHandle CopyFileW CreateDirectoryW CreateEventW CreateFileMappingW CreateFileW CreateMutexW CreateThread DecodePointer DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EncodePointer EnterCriticalSection ExitProcess FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageW FreeLibrary GetCommandLineW GetConsoleWindow GetCurrencyFormatW GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDiskFreeSpaceExW GetExitCodeProcess GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileType GetFullPathNameW GetGeoInfoW GetLastError GetLocalTime GetLocaleInfoEx GetLocaleInfoW GetLogicalDrives GetLongPathNameW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetProcAddress GetStartupInfoW GetSystemDirectoryW GetSystemInfo GetSystemPowerStatus GetSystemTime GetSystemTimeAsFileTime GetTempPathW GetThreadPriority GetTickCount64 GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserGeoID GetUserPreferredUILanguages GetVolumePathNamesForVolumeNameW GlobalMemoryStatusEx HeapAlloc HeapFree InitializeCriticalSection InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent K32GetModuleInformation LCIDToLocaleName LCMapStringEx LeaveCriticalSection LoadLibraryW LocalFree MapViewOfFile MoveFileExW MoveFileW MultiByteToWideChar OpenProcess OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetErrorMode SetEvent SetFilePointerEx SetFileTime SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SystemTimeToFileTime TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue TzSpecificLocalTimeToSystemTime UnhandledExceptionFilter UnmapViewOfFile UnregisterWaitEx VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteFile lstrcatW lstrcmpiW

advapi32

AccessCheck AllocateAndInitializeSid BuildTrusteeWithSidW CopySid DuplicateToken EqualSid FreeSid GetEffectiveRightsFromAclW GetLengthSid GetNamedSecurityInfoW GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation LookupAccountSidW MapGenericMask OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegFlushKey RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW SystemFunction036

user32

CharNextExA CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EnumDisplayDevicesW GetQueueStatus GetWindowLongPtrW KillTimer MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW RegisterClassW SetTimer SetWindowLongPtrW TranslateMessage UnregisterClassW wsprintfW

wevtapi

EvtClose EvtCreateRenderContext EvtNext EvtQuery EvtRender

d3d11

D3D11CreateDevice

shell32

CommandLineToArgvW SHCreateItemFromParsingName SHGetKnownFolderPath

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ole32

CoCreateInstance CoGetObject CoInitialize CoInitializeEx CoInitializeSecurity CoTaskMemFree CoUninitialize

oleaut32

SysAllocString SysFreeString

msvcrt

?_set_new_mode@@YAHH@Z ?terminate@@YAXXZ _CxxThrowException _XcptFilter __C_specific_handler __CxxFrameHandler3 __DestructExceptionObject ___lc_codepage_func ___lc_handle_func __argc __argv __getmainargs __pctype_func __set_app_type __strncnt _acmdln _amsg_exit _beginthreadex _callnewh _clearfp _close _commode _endthreadex _errno _fileno _fseeki64 _get_osfhandle _initterm _initterm_e _iob _isatty _ismbblead _local_unwind _localtime64_s _lock _lseeki64 _mktime64 _msize _open_osfhandle _read _set_fmode _timezone _tzname _tzset _unlock _waccess _wchmod _wcsdup _wgetenv_s _write _wsplitpath_s _wtoi abort asin atoi calloc ceil cos fclose feof fflush fgetpos fgets floorf fread free getenv_s islower isupper log10 malloc memchr memcmp memcpy memmove memset pow rand_s realloc sin sqrt strchr strcmp strcpy_s strerror strlen strncmp strncpy strnlen strrchr strstr strtol tolower towlower wcscat_s wcscmp wcscpy_s wcslen wcsnlen wcsrchr wctomb_s

netapi32

NetApiBufferFree NetShareEnum

userenv

GetUserProfileDirectoryW

winmm

timeKillEvent timeSetEvent

ws2_32

WSAAsyncSelect

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

284KB

Virtual Size

327KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

78KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026年··第三季度违纪违规人员名单信息pdf.exe

kernel32

advapi32

user32

wevtapi

d3d11

shell32

version

ole32

oleaut32

msvcrt

netapi32

userenv

winmm

ws2_32

generic