General

  • Target
    產品申報清單 (3).zip
  • Size 1.7MB
  • Sample260930-d14hlay18m
  • SHA256 13c2b67b159e469d64c9b779803bac333ad5b753fb046c34fc3e7f21bc9c0667
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 產品申報清單 (3).zip
    .zip 1.7MB
  • 115Q3申報清單.exe
    .exe 343KB
  • DriverInst.dll
    .dll 125KB
  • StructureI_Init.dat
    453KB
  • _Versatility.dat
    9KB
  • appshare.dll
    .dll 241KB
  • mediastores.dll
    .dll 248KB
  • msvcp140.dll
    .dll 553KB
  • msvcp140_1.dll
    .dll 25KB
  • msvcp140_2.dll
    .dll 252KB
  • msvcp140_atomic_wait.dll
    .dll 39KB
  • msvcp140_codecvt_ids.dll
    .dll 21KB
  • structure_end.dat
    35KB
  • system.dat
    182KB
  • util.dll
    .dll 1.4MB
  • vccorlib140.dll
    .dll 336KB
  • vcruntime140.dll
    .dll 108KB
  • vcruntime140_1.dll
    .dll 38KB
  • vcruntime140_threads.dll
    .dll 27KB

產品申報清單 (3).zip

  • SHA256 13c2b67b159e469d64c9b779803bac333ad5b753fb046c34fc3e7f21bc9c0667
  • MD5 SHA1 SHA512 SSDEEP TLSH