2026[.]09[.]02人员名单yioabcasdhqwiqgfj223[.]exe

General

Target
2026.09.02人员名单yioabcasdhqwiqgfj223.exe
Size 317KB
Sample260902-pd2ahasbma
SHA256 4d3ffbaba7e3b358dfb4191e0743fbfb5847c04d4a53fe1e27625fa211c274ff
MD5 48622b069594bd6c6171477e0bff6fdb
SHA1 e177934f70917d622d56c993d722155856081ac0
SHA512 36b84b009e91f10c44f57d05dc19904c8d0f03448402e362970860d450a3fd6dc1e1d1770ea2e83e2989a83914e1cb45333f404978a4a64d28e0c76bf04706e8
SSDEEP 6144:bkAi1YK5/8o11lJlFF5GsafvnCTtScHphlKOUZgIWS1C4865:y11lJlFFPIfEUZrWS1Cy
TLSH
T1C3640807EBB641E9C8BBC1389592613AF9713859877197DB67809B1B2F137E4EE39300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026.09.02人员名单yioabcasdhqwiqgfj223.exe

File Explorer

2026.09.02人员名单yioabcasdhqwiqgfj223.exe

.exe 317KB

2026.09.02人员名单yioabcasdhqwiqgfj223.exe

IMPHASH 569675eda58733692286cd60d419454d
SHA256 4d3ffbaba7e3b358dfb4191e0743fbfb5847c04d4a53fe1e27625fa211c274ff
MD5 48622b069594bd6c6171477e0bff6fdb
SHA1 e177934f70917d622d56c993d722155856081ac0
SHA512 36b84b009e91f10c44f57d05dc19904c8d0f03448402e362970860d450a3fd6dc1e1d1770ea2e83e2989a83914e1cb45333f404978a4a64d28e0c76bf04706e8
SSDEEP 6144:bkAi1YK5/8o11lJlFF5GsafvnCTtScHphlKOUZgIWS1C4865:y11lJlFFPIfEUZrWS1Cy
TLSH
T1C3640807EBB641E9C8BBC1389592613AF9713859877197DB67809B1B2F137E4EE39300
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

103704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDevice

kernel32

GetStringTypeW DeleteFileW Sleep QueryPerformanceCounter QueryPerformanceFrequency CloseHandle GetCurrentProcess DeviceIoControl CreateFileW GetDiskFreeSpaceExW GlobalMemoryStatusEx GetSystemInfo GetSystemPowerStatus WideCharToMultiByte VirtualProtect MapViewOfFile CreateFileMappingW lstrcatW GetSystemDirectoryW HeapFree lstrcmpiW HeapAlloc ExitProcess GetModuleFileNameW RtlLookupFunctionEntry RtlUnwindEx RaiseException RtlPcToFileHeader GetLastError HeapReAlloc EncodePointer DecodePointer GetCommandLineA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc LCMapStringW K32GetModuleInformation GetProcAddress GetModuleHandleW WriteFile GetStdHandle HeapSetInformation GetVersion HeapCreate HeapSize GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime MultiByteToWideChar LeaveCriticalSection EnterCriticalSection LoadLibraryW ContinueDebugEvent WaitForDebugEvent GetProcessHeap WaitForSingleObject CreateEventW InitializeProcThreadAttributeList DeleteProcThreadAttributeList UpdateProcThreadAttribute LocalAlloc LocalFree lstrcpyW TlsAlloc TlsGetValue TlsSetValue TlsFree GetFileAttributesW CopyFileW GetCurrentDirectoryW

Sharing