r5月帐目和发票[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

r5月帐目和发票.exe
Size

641KB
MD5

5e3e9036788808920a3ca6c8943ed407
SHA1

6704b7e7022b31053dc6389f946db8505b5681e6
SHA256

bf7d050627a7bf67ad74bed6cf159d30c88423a1c0ef53f9fdc80b6977e79d9e
SHA512

0e52fa586bc97b158457bcff0279604228f0e0cf001b5d428622e5dde19dccbd8f5acd0e31a323b5a739886c0fafeacab1e0994f0115f6ce5360606fc8158bb1
SSDEEP

6144:TYvasUQMHx8s+rck5kOGNMx4Dv1xMc1sH+p0GpyGsa8Tp4VolYYWWjp12wl5Obps:TqUQmJ+S9NMxyvta9GsaLiYr0vz4pud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r5月帐目和发票.exe

Files

r5月帐目和发票.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ