注册机_2023[.]0916[.]1_boxed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

注册机_2023.0916.1_boxed.exe
Size

4.3MB
MD5

6bb4e7e47db5124c33aea333af3c6730
SHA1

119bb2b4e83cf52db27b0523046546b50c81abef
SHA256

36820ea56aa5b1b5780a38e345f06c639d1dcfbf619e228a884bebb12c6c3fb7
SHA512

3604a47aad9d01da3aece9a2c4f54b9d4ea4ccb82ed1c2ecbebc0b1986bacfe18c08dce9791cf8e920e83afbe9bf9ddb936c7fe0dc9b71aab7774fd06bb6d5d6
SSDEEP

98304:+0tMpvEXSuWf//14bPmVIXqlDTzgSGse:aeS3f/YXqBzghse

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
注册机_2023.0916.1_boxed.exe

Files

注册机_2023.0916.1_boxed.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 826KB - Virtual size: 826KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 93KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 2.8MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE