1f7f7813b95d5a35e61b196647be2aaa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f7f7813b95d5a35e61b196647be2aaa
Size

1.5MB
MD5

1f7f7813b95d5a35e61b196647be2aaa
SHA1

c4b372eff6e45271ac57df1f7afed501e04d0815
SHA256

4ebe74d58166ea5fd4569eda1be039b081e0effc2da305f80565dcc9148bb0e6
SHA512

2a53d4959a0514ff9163f32717d5bfe2d3c5619954a61ed6f41c189307de38e7c2302e06b89e54d0ca23f5499edaecdc775fd5028e442e34eaae7a6ae17be929
SSDEEP

24576:K32SeUcNWiuhT2L1YsLPxY+E7oTeP7DgzdmujvsgZCjs7Rf2F00EiGUr6EDrY9:K2SeuhSL1YgZ5TeP7wggMjs9I0OrBfY9

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/金缘E书生成器/Exe_ebookBuilder.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/金缘E书生成器/Exe_ebookBuilder.exe

Files

1f7f7813b95d5a35e61b196647be2aaa
.rar
金缘E书生成器/Exe_ebookBuilder.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
金缘E书生成器/Templates/easy/main.html
.html
金缘E书生成器/Templates/easy/page.htmL
.html
金缘E书生成器/Templates/easy/style/style.css
金缘E书生成器/Templates/easy/style/www_huidawo_net_bg.gif
.gif
金缘E书生成器/Templates/easy/style/www_huidawo_net_toc_menu.gif
.gif
金缘E书生成器/Templates/easy/toc.html
.html
金缘E书生成器/新云软件.url
.url