1f1c69d0e0fe82fe104b3f174253d9e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f1c69d0e0fe82fe104b3f174253d9e2
Size

940KB
MD5

1f1c69d0e0fe82fe104b3f174253d9e2
SHA1

86fc0ac02cc9772f9d414c2ce1865459a514c60e
SHA256

bf1ff1a78391ff860c0263d8d00f0686cb06b7421ab2740e552de701671abcfa
SHA512

cdd5174fccd2628a2e068831036ff354287582b2ce50cf8dbda6e088ec7f3fb8573a7e8df83397771cb3cf9a01bb571040eb41ad7b178d76fdb2b02c0420c608
SSDEEP

24576:mroHCaFfJKLiox+jEzqzPG01Gj8inunrDDct:i+C6wsjEzq5iu3wt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setupmj.exe

Files

1f1c69d0e0fe82fe104b3f174253d9e2
.rar
setupmj.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot
说明.txt