神妙RAP共享[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

神妙RAP共享.exe
Size

46.7MB
MD5

5a65caa349ff1dc9b67dc8c3841bd6c4
SHA1

2c7f7291501146854ad71b9caaa29a02f9d39694
SHA256

0149b3555b57883985ff17032df77cd929cb236d3e21c460b5059b00bcbe5096
SHA512

93f4ac7b42882026a77cbf864be40d626b73a3a94b486b879c161c2025653372bc8d04b254f58fe3c2f3311c600389379a66a7acfcb920fa854507e0be328e39
SSDEEP

786432:Vp/puTPUa4XD+yP5gPNDQ4RjYkGA6h8kh1jPbvuTuzmt+8svq:Vp/SP73KOYrhllquzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
神妙RAP共享.exe

Files

神妙RAP共享.exe
.exe windows x86

0c5c065f8eb68f0427b7134d7e3eb973

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetSystemTime

user32

ModifyMenuA
GetFocus

advapi32

DeleteService
RegCloseKey

gdi32

SetMapMode
LineTo

winspool.drv

DocumentPropertiesA
OpenPrinterA

comctl32

ord17
ord17

shlwapi

PathFileExistsA

rasapi32

RasHangUpA

winmm

waveOutRestart

ws2_32

ntohl

shell32

DragQueryFileA

ole32

OleUninitialize

oleaut32

VariantCopy

wininet

InternetCanonicalizeUrlA

comdlg32

GetFileTitleA

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 13.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 611KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 16.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 26.4MB - Virtual size: 26.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 15.5MB - Virtual size: 15.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c5c065f8eb68f0427b7134d7e3eb973

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

winspool.drv

comctl32

shlwapi

rasapi32

winmm

ws2_32

shell32

ole32

oleaut32

wininet

comdlg32

Sections

.text Size: - Virtual size: 1.4MB

.rdata Size: - Virtual size: 13.2MB

.data Size: - Virtual size: 611KB

.rsrc Size: 40KB - Virtual size: 36KB

.svmp1 Size: - Virtual size: 16.6MB

.svmp2 Size: 26.4MB - Virtual size: 26.4MB

.svmp3 Size: 4.8MB - Virtual size: 4.8MB

.svmp4 Size: 15.5MB - Virtual size: 15.5MB

.text
Size: - Virtual size: 1.4MB

.rdata
Size: - Virtual size: 13.2MB

.data
Size: - Virtual size: 611KB

.rsrc
Size: 40KB - Virtual size: 36KB

.svmp1
Size: - Virtual size: 16.6MB

.svmp2
Size: 26.4MB - Virtual size: 26.4MB

.svmp3
Size: 4.8MB - Virtual size: 4.8MB

.svmp4
Size: 15.5MB - Virtual size: 15.5MB