Tax_Notice-10.zip
- SHA256 a3e6b483140b78129d56d383ed9689a12daac8e92ac029056cd22c16dfca073a
Static task
static1
Behavioral task
behavioral1
Sample
Tax_Notice-10.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tax_Notice-10.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
General
- Target Tax_Notice-10.zip
- Size 447KB
- Sample260908-q2dpsacl7x
- SHA256 a3e6b483140b78129d56d383ed9689a12daac8e92ac029056cd22c16dfca073a
- MD5 9b811fd727bcbc06b336b90ee462a520
- SHA1 29d7540ad8623f1144d9f48b546282411c3a6337
- SHA512 f821567d87ec8598d56a7a2c376a1b6f680d9aca547c443dd9a8f138e48b6305289f80bae4e62aa72b933b4b23218758d410384863e9df5e77dbe9dd7e76e572
- SSDEEP 6144:bAuFQNqODBtU4ltZwf5Du4Msh1ZFnNO6+wb/U1efsxLvkouIWHQsxCi2mlWniBf5:bAuCBtgQ4bZFNO6+wwEsxLFNOxxjlNIk
- TLSH T1CEA423B84235CBA4266E732D523D9CD71501D3A610DAB6DFB0764B3BB0026EE4AA52C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Tax_Notice-10.zip.zip 447KB
-
Tax_Notice-10.exe.exe 1.1MB
Tax_Notice-10.exe
- IMPHASH 4ef0079b4f4c173a7e69500c1449a05e
- SHA256 c92efb370eb4f2baa398743da50694df95eaae5c1513f2f63715eb64806e51eb
- MD5 c9aecbf4bbed5c38163f0bd15001613d
- SHA1 5c875311dbc761c08dc604ef7fc13a18d56472ba
- SHA512 9ec8ee624eacb142cefafdac2271e7820f0d8dd866fef23518edbc1d3c081ce2234b5ed8bc5bfc84201a4b0c5a646dcac2e2bbac735b01d1d6f3c5834528cf28
- SSDEEP 24576:zGKuKkPztKt9cHPrLRAqKBAy1N1UGAmnnnFnnnZnnnGnnnsddodpbaQTIlXdodaT:zGKuKkPzgt9cHTLRAqK81kMbaQTIll
- TLSH T1DE453C1BE76245ECC56FC13883A78772A970785943347E2E1EA5DB222F50D60AF3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7e:bb:9e:d4:10:50:9c:65:3b:65:51:23:72:9c:60:fb:cc:44:73:90:70:fd:99:71:3f:77:2b:9d:9c:e3:30:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=WANG BING,O=WANG BING,L=HANDAN,ST=HEBEI,C=CN
Chains
Sep 7, 2026
CN=WANG BING,O=WANG BING,L=HANDAN,ST=HEBEI,C=CN
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=WANG BING,O=WANG BING,L=HANDAN,ST=HEBEI,C=CN
Serial Number
4c:45:93:ab:03:2c:0a:92:cd:b5:43:9d:b5:61:eb:99
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 16, 2026 - Jun 16, 2027
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
GetUserNameA
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FindResourceA
GetComputerNameA
GetEnvironmentVariableA
GetFileAttributesA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GlobalMemoryStatusEx
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
Process32First
Process32Next
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WriteFile
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fmode
_initterm
_ismbblead
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
strstr
vfprintf
user32
wsprintfA
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
576B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
452B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ