General

  • Target
    SuyinQuote_Setup_v1.27.1.exe
  • Size 6.8MB
  • Sample261113-cbk5aae15j
  • SHA256 6c2c2afe42dd7b3a6df6c3643f628d55d65c657f0ec2bb1a78e65f6738ef12b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • SuyinQuote_Setup_v1.27.1.exe
    .exe 6.8MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • _internal/VCRUNTIME140.dll
    .dll 121KB
  • _internal/_bz2.pyd
    .dll 71KB
  • _internal/_ctypes.pyd
    .dll 120KB
  • _internal/_decimal.pyd
    .dll 266KB
  • _internal/_hashlib.pyd
    .dll 54KB
  • _internal/_lzma.pyd
    .dll 149KB
  • _internal/_socket.pyd
    .dll .js 71KB
  • _internal/app.html
    .html 236KB
  • _internal/base_library.zip
    .zip 1.3MB
  • _collections_abc.pyc
    46KB
  • _weakrefset.pyc
    11KB
  • abc.pyc
    7KB
  • codecs.pyc
    39KB
  • collections/__init__.pyc
    72KB
  • copyreg.pyc
    7KB
  • encodings/__init__.pyc
    6KB
  • encodings/aliases.pyc
    12KB
  • encodings/ascii.pyc
    2KB
  • encodings/base64_codec.pyc
    3KB
  • encodings/big5.pyc
    2KB
  • encodings/big5hkscs.pyc
    2KB
  • encodings/bz2_codec.pyc
    4KB
  • encodings/charmap.pyc
    3KB
  • encodings/cp037.pyc
    3KB
  • encodings/cp1006.pyc
    3KB
  • encodings/cp1026.pyc
    3KB
  • encodings/cp1125.pyc
    13KB
  • encodings/cp1140.pyc
    3KB
  • encodings/cp1250.pyc
    3KB
  • encodings/cp1251.pyc
    3KB
  • encodings/cp1252.pyc
    3KB
  • encodings/cp1253.pyc
    3KB
  • encodings/cp1254.pyc
    3KB
  • encodings/cp1255.pyc
    3KB
  • encodings/cp1256.pyc
    3KB
  • encodings/cp1257.pyc
    3KB
  • encodings/cp1258.pyc
    3KB
  • encodings/cp273.pyc
    3KB
  • encodings/cp424.pyc
    3KB
  • encodings/cp437.pyc
    13KB
  • encodings/cp500.pyc
    3KB
  • encodings/cp720.pyc
    3KB
  • encodings/cp737.pyc
    13KB
  • encodings/cp775.pyc
    13KB
  • encodings/cp850.pyc
    12KB
  • encodings/cp852.pyc
    13KB
  • encodings/cp855.pyc
    13KB
  • encodings/cp856.pyc
    3KB
  • encodings/cp857.pyc
    12KB
  • encodings/cp858.pyc
    12KB
  • encodings/cp860.pyc
    13KB
  • encodings/cp861.pyc
    13KB
  • encodings/cp862.pyc
    13KB
  • encodings/cp863.pyc
    13KB
  • encodings/cp864.pyc
    13KB
  • encodings/cp865.pyc
    13KB
  • encodings/cp866.pyc
    13KB
  • encodings/cp869.pyc
    13KB
  • encodings/cp874.pyc
    3KB
  • encodings/cp875.pyc
    3KB
  • encodings/cp932.pyc
    2KB
  • encodings/cp949.pyc
    2KB
  • encodings/cp950.pyc
    2KB
  • encodings/euc_jis_2004.pyc
    2KB
  • encodings/euc_jisx0213.pyc
    2KB
  • encodings/euc_jp.pyc
    2KB
  • encodings/euc_kr.pyc
    2KB
  • encodings/gb18030.pyc
    2KB
  • encodings/gb2312.pyc
    2KB
  • encodings/gbk.pyc
    2KB
  • encodings/hex_codec.pyc
    3KB
  • encodings/hp_roman8.pyc
    3KB
  • encodings/hz.pyc
    2KB
  • encodings/idna.pyc
    14KB
  • encodings/iso2022_jp.pyc
    2KB
  • encodings/iso2022_jp_1.pyc
    2KB
  • encodings/iso2022_jp_2.pyc
    2KB
  • encodings/iso2022_jp_2004.pyc
    2KB
  • encodings/iso2022_jp_3.pyc
    2KB
  • encodings/iso2022_jp_ext.pyc
    2KB
  • encodings/iso2022_kr.pyc
    2KB
  • encodings/iso8859_1.pyc
    3KB
  • encodings/iso8859_10.pyc
    3KB
  • encodings/iso8859_11.pyc
    3KB
  • encodings/iso8859_13.pyc
    3KB
  • encodings/iso8859_14.pyc
    3KB
  • encodings/iso8859_15.pyc
    3KB
  • encodings/iso8859_16.pyc
    3KB
  • encodings/iso8859_2.pyc
    3KB
  • encodings/iso8859_3.pyc
    3KB
  • encodings/iso8859_4.pyc
    3KB
  • encodings/iso8859_5.pyc
    3KB
  • encodings/iso8859_6.pyc
    3KB
  • encodings/iso8859_7.pyc
    3KB
  • encodings/iso8859_8.pyc
    3KB
  • encodings/iso8859_9.pyc
    3KB
  • encodings/johab.pyc
    2KB
  • encodings/koi8_r.pyc
    3KB
  • encodings/koi8_t.pyc
    3KB
  • encodings/koi8_u.pyc
    3KB
  • encodings/kz1048.pyc
    3KB
  • encodings/latin_1.pyc
    2KB
  • encodings/mac_arabic.pyc
    13KB
  • encodings/mac_croatian.pyc
    3KB
  • encodings/mac_cyrillic.pyc
    3KB
  • encodings/mac_farsi.pyc
    3KB
  • encodings/mac_greek.pyc
    3KB
  • encodings/mac_iceland.pyc
    3KB
  • encodings/mac_latin2.pyc
    3KB
  • encodings/mac_roman.pyc
    3KB
  • encodings/mac_romanian.pyc
    3KB
  • encodings/mac_turkish.pyc
    3KB
  • encodings/mbcs.pyc
    2KB
  • encodings/oem.pyc
    1KB
  • encodings/palmos.pyc
    3KB
  • encodings/ptcp154.pyc
    3KB
  • encodings/punycode.pyc
    9KB
  • encodings/quopri_codec.pyc
    3KB
  • encodings/raw_unicode_escape.pyc
    2KB
  • encodings/rot_13.pyc
    4KB
  • encodings/shift_jis.pyc
    2KB
  • encodings/shift_jis_2004.pyc
    2KB
  • encodings/shift_jisx0213.pyc
    2KB
  • encodings/tis_620.pyc
    3KB
  • encodings/undefined.pyc
    2KB
  • encodings/unicode_escape.pyc
    2KB
  • encodings/utf_16.pyc
    7KB
  • encodings/utf_16_be.pyc
    2KB
  • encodings/utf_16_le.pyc
    2KB
  • encodings/utf_32.pyc
    7KB
  • encodings/utf_32_be.pyc
    2KB
  • encodings/utf_32_le.pyc
    2KB
  • encodings/utf_7.pyc
    2KB
  • encodings/utf_8.pyc
    2KB
  • encodings/utf_8_sig.pyc
    6KB
  • encodings/uu_codec.pyc
    4KB
  • encodings/zlib_codec.pyc
    4KB
  • enum.pyc
    84KB
  • functools.pyc
    41KB
  • genericpath.pyc
    7KB
  • heapq.pyc
    17KB
  • io.pyc
    4KB
  • keyword.pyc
    1021B
  • linecache.pyc
    8KB
  • locale.pyc
    64KB
  • ntpath.pyc
    26KB
  • operator.pyc
    17KB
  • os.pyc
    44KB
  • posixpath.pyc
    17KB
  • re/__init__.pyc
    18KB
  • re/_casefix.pyc
    1KB
  • re/_compiler.pyc
    26KB
  • re/_constants.pyc
    5KB
  • re/_parser.pyc
    42KB
  • reprlib.pyc
    10KB
  • sre_compile.pyc
    607B
  • sre_constants.pyc
    610B
  • sre_parse.pyc
    603B
  • stat.pyc
    5KB
  • traceback.pyc
    70KB
  • types.pyc
    15KB
  • warnings.pyc
    28KB
  • weakref.pyc
    31KB
  • _internal/exceljs.min.js
    .js 925KB
  • _internal/libcrypto-3-x64.dll
    .dll 7.6MB
  • _internal/libffi-8.dll
    .dll 27KB
  • _internal/logo-data.js
    262KB
  • _internal/pdf.min.js
    .js 368KB
  • _internal/pdf.worker.min.js
    .js 1.1MB
  • _internal/python313.dll
    .dll 5.9MB
  • _internal/select.pyd
    .dll 18KB
  • _internal/unicodedata.pyd
    .dll 682KB
  • _internal/xlsx.full.min.js
    .js 861KB
  • ① 安装到本机.bat
    .bat 1KB
  • ② 卸载.bat
    382B
  • 苏银报价计算器.exe
    .exe 1.7MB
  • launcher.pyc
    5KB

SuyinQuote_Setup_v1.27.1.exe

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 6c2c2afe42dd7b3a6df6c3643f628d55d65c657f0ec2bb1a78e65f6738ef12b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths