辉煌移动POS中间件配置[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

辉煌移动POS中间件配置.exe
Size

84KB
MD5

b84604828d373b6b80dfb197118b4a15
SHA1

6d97264253448711ea8d1e5c5220a115c57f656b
SHA256

2e91e0a5a689965114a5b8f5fa6981e98dce073bb2e19c14cbe26dafd5139ef3
SHA512

5d2455b13a30da7774b9b7884cc1241c850b686d67e24b4a6902cefe04947d9a90f9886375648c1babe1ff84a258c2cd3270d28eeeb36eabdd47fc8b10812fae
SSDEEP

1536:eRQF76mL9nVJEetVDUxSpvJ2z9IDZ3gWzF1vk7s:eRK73RVJEMVDqyJ2z9IDZwWzX8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
辉煌移动POS中间件配置.exe

Files

辉煌移动POS中间件配置.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ