XIANGBU GROUP- PI# 6647580 - INV, PL, CO, BL[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XIANGBU GROUP- PI# 6647580 - INV, PL, CO, BL.rar
Size

594KB
MD5

67e73c15d6be0d1f12080f5dd2331634
SHA1

8502b9c133223f3a9ed10b5fdcec41b8f98a6f83
SHA256

1ce1567b2af1c8784cdf20245e815321449db0846d269467058c68978e45466c
SHA512

c9dbd4bbbe1d0ba8acfe447da60bf3af5e9c20dc5bc58010c064e4251ee26271007e34681a7d2f636ad845652d72924a145a31baa9f437d404e33e9df6707e57
SSDEEP

12288:LyoUBA4zxzFdCWByyEVtRqbWM4vXwnc1Uw+YSf8T:LyocrFdCWJEVtzvwnciAS0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XIANGBU GROUP- PI# 6647580 - INV, PL, CO, BL.exe

Files

XIANGBU GROUP- PI# 6647580 - INV, PL, CO, BL.rar
.rar
XIANGBU GROUP- PI# 6647580 - INV, PL, CO, BL.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 630KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ