uni.zip
- SHA256 d906ac8463756d0994360988ca3fcad8f698df53a1e79d1dd2a42854c4580fcc
Static task
static1
Behavioral task
behavioral1
Sample
税務報告書.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
税務報告書.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
General
- Target uni.zip
- Size 25.3MB
- Sample260910-e6n6jafr7y
- SHA256 d906ac8463756d0994360988ca3fcad8f698df53a1e79d1dd2a42854c4580fcc
- MD5 344f796a5fe684b8c8a5c65b663a04af
- SHA1 3b060cb0de0639d392661a474c8109688782cd3e
- SHA512 b110d00c7a069ddb1229e9112a53e6feb1d92127cb91d61d732654af147ad71482c91b741f72d150c9e2b3c96a3649cea56fecb249cc07f31edffb2a0e60e172
- SSDEEP 393216:zjviq7zQQzKM2uNc6AAjHSSa3hqOUIMJV5fkIQXpa1ZMj7kThINfFhPPq+AUbuWJ:3vJ7PR7R+Eb401ZMjATh8fFhXLdbu8
- TLSH T13647337CA60157B8F604C59DEA334E447B0D691EA6217CA24E4E34DA3363AFEC5743AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
uni.zip.zip 25.3MB
-
税務報告書.exe.exe 25.3MB
税務報告書.exe
- IMPHASH 09d0478591d4f788cb3e5ea416c25237
- SHA256 6a27a63285ae06e6d0004dc2ccefed9c0b4232fc0f419c95501b9e1f3d444e18
- MD5 05ea3e31e62042d5c9d886ec77c6f2e1
- SHA1 42102cf8eb28bf5b1e1555a9a29a98ea9c6a18e3
- SHA512 fc6d8250715fd53ab64ba542dfc5f6a56ef83cfeda9aa8b24751ced9c60853649c9785d31329c264b97433b471cb0dfcc73c1e141fc8fe9b3fa56038a28638a4
- SSDEEP 393216:SQSNdWkNeM2YtcmSwhzCaOXDgACAuZLNZ8Qg1RaVNqjzWfRSlj1fJTgww4FYggRf:St5DtV/Cc9isVNqjqfRij1fpNjFYx
- TLSH T12C47337DA60057B8FA04C4BDE9334D14BB0D651EA5217CA24A0E64DA3363AFED5783BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c7:40:65:d0:b0:14:f5:ac:d6:db:63:c2:33:08:2e:94:24:a2:54:41:ba:22:e0:b4:d5:30:69:dc:c8:ca:8c:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN
Chains
Sep 9, 2026
CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Digest
7f:46:5d:bf:8d:f5:19:8f:84:53:53:d3:fc:5c:de:98:70:23:15:c8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN
Chains
Sep 9, 2026
CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Wei Liu,O=Liu Wei,L=庄河,ST=辽宁,C=CN
Serial Number
66:6b:91:4a:0e:24:db:e5:77:5b:9a:69:a3:fb:7c:fb
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 23, 2026 - Mar 23, 2027
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
0
Major OS version
6
Entry point
6912
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Name
.text
Size
25.3MB
Virtual Size
26.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=11, id=259, version=33145,
count=142, id=261, version=33145,
count=19, id=260, version=33145,
count=20, id=259, version=35721,
count=17, id=260, version=35721,
count=37, id=261, version=35721,
count=7, id=257, version=33145,
count=110, id=1, productName=Unmarked objects,
count=1, id=264, version=36256,
count=1, id=255, version=36256,
count=1, id=151,
count=1, id=258, version=36256,