ServerDat编辑工具[.]exe | Triage

Sharing

General

Target

ServerDat编辑工具.exe
Size

563KB
MD5

efb1d3f2554d8514b8a536ac5c2b5289
SHA1

0a48e44878928c828ec4a7461aba5c71a9d76c0f
SHA256

a5172a23ffab372401d1bb40e56266fcec56bd17abd35f88b3a66c23d67ae32f
SHA512

e2583c0411b57d60851b0545c1609dfcdb8a74dd048c18666cf5b00902d9924f8a252e5515e0f8e94d8f73f7db335befc8326a6fea739375cae0c6e795fc259f
SSDEEP

12288:p7Pq0pVKJOqQQSgHjUqGnvhhOzFYhtuJlERD6Rk92E:p7ikESoGn5hOzFYhgAReO8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ServerDat编辑工具.exe

Files

ServerDat编辑工具.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ