40a6a798c77f4cc92c530e85ea74f27e | Triage

Sharing

General

Target

40a6a798c77f4cc92c530e85ea74f27e
Size

721KB
MD5

40a6a798c77f4cc92c530e85ea74f27e
SHA1

0cdf4ac90960d2929601353247f97780ced7402b
SHA256

3e69fc6bd3a8bceef3c4e9ec86d317363b15585bda27a9b9de826cc5a4048247
SHA512

be284fdb726c50d0eec682c6e294fe2c7c4efdef42692f09b061f9cb511b6f0eacecea7c37209ecdc9c7141dc9aa6b4f7fd5d33761f2517cc46d34dba1ee417b
SSDEEP

12288:KwMH1hIrniioYAfGUtEDL/xuiPCXza036z/0icUcKWxc7v9Lmc9dqDSNjdlteZ:K8niH4H5uKq2WC7v9i6XNjq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/百合魔域.exe

Files

40a6a798c77f4cc92c530e85ea74f27e
.rar
百合魔域.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ