0a4adf2725fa0f05a8df9a8e36a4b159 | Triage

Sharing

General

Target

0a4adf2725fa0f05a8df9a8e36a4b159
Size

365KB
MD5

0a4adf2725fa0f05a8df9a8e36a4b159
SHA1

e06023e57da6d690c8eab17cea50a0419de25d59
SHA256

a3baa5322c5fa070ea3f9671d1fc35ede8d7d8a327936be7baeba3896d86f782
SHA512

6d0dca2de55e34590c96f7d07a43d66f4dffdaea674b4c08e01cffb05a67d40e3fc5b50a160f4462086b4e57908194eff23193818d5844d0dfbfde8964b80091
SSDEEP

6144:01eHrs5vkVGV7t9WJxSnCpQgGNu+Cl6vx0R2sZjaJ0y2K3ou6lCitolPolf379xD:016rsOVGV7t9yxSk5GNuE0R2s4yyDYum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/多网卡切换器 v1.0.3/多网卡切换器.exe

Files

0a4adf2725fa0f05a8df9a8e36a4b159
.rar
多网卡切换器 v1.0.3/多网卡切换器.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ