Open eBook書櫃[.]exe | Triage

Sharing

General

Target

Open eBook書櫃.exe
Size

143KB
MD5

85a6672a2b8efbf9db16604829909bfa
SHA1

a99e0a9bf63ca5871c86bc17c4f4def884fb1b30
SHA256

e7511e0850bd2cc1b051000ac17ca7fb97dc8f7af7b59bbc55d77c729647a7f8
SHA512

4699481461d81d8ea4768ed477ec580f100384cd78ce9e658da86e7b47b86434c13812d940443f0496da89dc53d40758be099022d44067981681ac8adff6021a
SSDEEP

3072:rjt9GOBO/17meAvUmwyZ9xghpoXEuxBFlS5M4tSOv:rjDAwFRwhpmXxBXN41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Open eBook書櫃.exe

Files

Open eBook書櫃.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ