7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c
- SHA256 7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
23.248.226.130_资源_加强清理_460.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
23.248.226.130_资源_加强清理_460.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target 7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c
- Size 1.0MB
- Sample261113-n8evbabs8k
- SHA256 7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c
- MD5 9ef5032a13be691a224c7092913e09be
- SHA1 d5c889dd6a6ab7f21f88bf6f9a94b2638eb434b4
- SHA512 0925f60d124ee77cc94a9bf00bab373bd22b8862624d6ac0bf0e6ead126c513cee0a03a21dc13a1b252a0d1f5632ea5cac3dab62f581584c1e31235004ec902a
- SSDEEP 24576:AMRs4avyOaiJ1vJxn+sOhEHyD3KEQgVIGaMa6TvxtZNbUTkuu8LsYM:hs4IyOai1hx+AyDaEQgVxlFmnsYM
- TLSH T1E1353344792275434D9B35FDAE11E53011CDEDC4E12D64EE83C9318F26A27AF48BFA2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/23.248.226.130_资源_加强清理_460.exe
File Explorer
-
7fc92a40783ffe783e02e74d287677d7037b9c256947cc6102dbcbbc17b3476c.zip 1.0MB
-
23.248.226.130_资源_加强清理_460.exe.exe 3.0MB
23.248.226.130_资源_加强清理_460.exe
- IMPHASH c7f4a7c59999f7a98cfb176debd524c8
- SHA256 6c2909ecee93844641bab825675d6fef81abc8e9b697853884bfffa66163872f
- MD5 7fe131452696652ad7ecee45c02e188b
- SHA1 a34c5dad0118b9888832eb09cded0c33fa9d8119
- SHA512 358a0eaf2969e45b47bad3d9245033a3648f43bdcfc642ee3395f7476bd2235ea0c60001eebf85bba8bce0ba10a3bec4a11ca9ae217c82a80482586fa86067bd
- SSDEEP 49152:WhPYI0cUOIbUNEWWDKgFXpe8JTnE2g2PFDjst:WdZ0cUOIANEWWDKgFXpe8htg2PFDW
- TLSH T110E55CDB2077069EF0A9C93458F0167BDD7BCD629F40C82312B39EB9BD123A09E5E855
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
bf:48:48:fe:8a:c1:5c:f8:80:f8:c4:53:47:e3:ea:d8
Digest Algorithm
md5
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Lbh-ssy-CA v1.01
Chains
Jan 1, 0001
Subject
CN=Lbh-ssy-CA v1.01
Serial Number
0c:bf:a1:0c:ee:b1:f7:81:48:af:58:92:56:9d:fe:85
Issuer
CN=Lbh-ssy-CA v1.01
Timespan
Dec 31, 1999 - Aug 7, 8888
Minor OS version
0
Major OS version
0
Entry point
68352
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
CloseHandle
CompareStringW
CreateFileW
CreateThread
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
Name
.text
Size
126KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ