222389a5055392c55314253d118d6a7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

222389a5055392c55314253d118d6a7c
Size

517KB
MD5

222389a5055392c55314253d118d6a7c
SHA1

185b909a5dd083d1f9008c7bab0d3ed812285017
SHA256

3dec006c0891e24422a7a2efc4b39827c32be583daa1b59d1d93d8a8a3add87d
SHA512

50685cf1b4a66387374f1e4530c0278f7f2af22cb8c3cb94a360f6fc732293138d59f75804dde52a7efbd565b97e02f22a1ff03b9e9647857d8e1d232ae976a8
SSDEEP

12288:Yx6fR7LHtVt1KlxWsZyWPpCv2frLK38OeSDk8x/h:m6f9hIlxlZRPpCwrLo8LSI8x/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Oem7Y3.1.exe

Files

222389a5055392c55314253d118d6a7c
.rar
Don't ReadMe.txt
Oem7Y3.1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

OEM0
Size: - Virtual size: 884KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OEM1
Size: 501KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Q&A.txt
安装支持.bat
.bat .vbs
注册码.reg