2a618915b1b333f3bb0a0a96cd46d0fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a618915b1b333f3bb0a0a96cd46d0fe
Size

2.6MB
MD5

2a618915b1b333f3bb0a0a96cd46d0fe
SHA1

c480992149573ee0466b8571e3a1380ca35206d3
SHA256

06027b4013953634f2501b4031e0ff323a19ef63f36d777f718305c89e56583c
SHA512

958a2f8e3e5c87eee53aad72534db29631b492f622bc7d3ddef593311ddfc01df6fbca1a8f5c433adb212752965d5777bea64dbe7085f2af21357c763e429a28
SSDEEP

49152:urV+sJ/EudgHcjjHn1vt5QldNH+rSHph2PUOqPAkVB77D/Af+FdFz:uHccxkwrSHWP6VR7DR1z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/smbf051010.exe

Files

2a618915b1b333f3bb0a0a96cd46d0fe
.rar
smbf051010.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot