General

  • Target
    税務調査.img
  • Size 1.7MB
  • Sample260901-e3b2sswtbz
  • SHA256 e6eb7accfcfb184bf860753ee1b436e3fc77d5e9e5436c6baa6a37e512055896
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • DLL Hijacking vulnerability 6 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 税務調査.img
    .iso 1.7MB
  • out.iso
    .iso 1.7MB
  • heif.dll
    .dll 707KB
  • out.upx
    .dll 2.9MB
  • msvcp140.dll
    .dll 572KB
  • resmonitor.dll
    .dll 177KB
  • vcruntime140.dll
    .dll 127KB
  • vcruntime140_1.dll
    .dll 58KB
  • 税務調査.exe
    .exe 34KB

税務調査.img

  • SHA256 e6eb7accfcfb184bf860753ee1b436e3fc77d5e9e5436c6baa6a37e512055896
  • MD5 SHA1 SHA512 SSDEEP TLSH