发票和帐单[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

发票和帐单.exe
Size

687KB
MD5

bbdee2251cb043a5934e0158999e5352
SHA1

6d4557d1b67a9bb3626ddc6a8bd474fc53bd9887
SHA256

d52990c3733f37b8d26a05d7db3864d5815bdfe6ecbaade840b81402e3cc29e7
SHA512

f6d6220dca9f3b5f3e4a6c9c3d53cd0b6cac68c7ad94479be71b27220ff26e00cde1679d5fd566cbe88dc56adf4c9118d09b2cded255da2e213ed2ea8ef8b90e
SSDEEP

12288:S1y2iN3RrtfMuL7GJhYBzLXDOGFu+OOhZMNCP6Bk6HSt:J11Rrd/Qh8zLXDz5OOPCCq

Score

1^/10

Malware Config

Signatures

Files

发票和帐单.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ