华为_版本查询_工具箱_boxed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

华为_版本查询_工具箱_boxed.exe
Size

3.2MB
MD5

c97344edfd59a233c3a6d88aea1bffee
SHA1

3e67ee64c5337265c4de115cc5939d1211371bf6
SHA256

d0bbe6537c52e904d3c42ede93774c7c7cce49312f0718dfb1e809002f6fbdac
SHA512

45cb012b8b12cdf687d77cb57c6d561d3225e442e6fb54f72bbe43d369aa4d99f7b6926d11337708899c219dd789542975506a7bc836f950675c5305ce9a4dc5
SSDEEP

49152:oW447i4Gv+2HP13rAf6AbTKvfP13raf6AbTKwvM:IUi4k+uN3rDACvfN3rRACwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
华为_版本查询_工具箱_boxed.exe

Files

华为_版本查询_工具箱_boxed.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 660KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 1008KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE